3 ms·
This doesn't completely stop sslstripping. It does mitigate the possibility of link rewriting. However, unless you directly access the site via HTTPS, there wou
by michaelmior 12y ago
This doesn't completely stop sslstripping. It does mitigate the possibility of link rewriting. However, unless you directly access the site via HTTPS, there would have to be a redirect to the secure version, which can still be hijacked.
- agwa 12y agoTrue, but HSTS (which HN uses) solves that problem on all but the first visit.
- michaelmior 12y agoIndeed. But not on the Treo ;)