3 ms·
> I can hijack a DNS entry and host a server pretending to be you Not for long.[1] [1] https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-htt
by Zikes 11y ago
> I can hijack a DNS entry and host a server pretending to be you
Not for long.[1]
[1] https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/ https://blog.mozilla.org/security/2015/04/30/deprecating-non...
- narrowrail 11y agoI don't think these watches use a browser to reach their servers (i.e. the cloud).
- Zikes 11y agoOnce it's the norm for browsers it wouldn't make much sense not to use HTTPS everywhere.
- click170 11y agoThe solution to this is very simple: cut off their access entirely. I use an SSL proxy at home and if you attempt to pin certificates such that the local certificate store is ignored or inaccessible. Your device can be guaranteed to not have access from my network. End of story.