5 ms·
If I click on https://foobarbaz.com https://foobarbaz.com and get phishsed then I know that either foobarbaz.com had something to do with it or certificate veri
by fpgeek 12y ago
If I click on https://foobarbaz.com https://foobarbaz.com and get phishsed then I know that either foobarbaz.com had something to do with it or certificate verification has been compromised.
If I click on http://foobarbaz.com http://foobarbaz.com anyone who can successfully mess with that HTTP connection (a much wider universe of attackers that I have less visibility into, especially if I frequently use different networks [home, work, mobile, etc.]) could have been responsible.
- ldng 12y agoThe thing is most phising attack don't even bother going that far, some people will click on https://foobazbar.com https://foobazbar.com for a "rightly" crafted mail. HTTPS does not prevent anything here.