3 ms·
> AWS doesn't use EV-TLS for the console login, especially when they're so good about other things You mean this AMZN?: http://imgur.com/S1Pz155,TdRDjIq#0 htt
by noinsight 11y ago
> AWS doesn't use EV-TLS for the console login, especially when they're so good about other things
You mean this AMZN?:
http://imgur.com/S1Pz155,TdRDjIq#0 http://imgur.com/S1Pz155,TdRDjIq#0
It's shocking to me that they aren't even using proper TLS settings even though I'm sure they're perfectly capable and aware. Doesn't inspire confidence in their security.
- jamiesonbecker 11y agoAgreed! (but, in fairness, portal.aws.amazon.com might be an obsolete domain, since it just redirects to the correct aws.amazon.com... the actual console login does use TLS 1.2 etc.) Even so, it still blows my mind that even the main Amazon.com main page uses no SSL at all by default, and they're an e-commerce site, unlike Google and FB. Seems to show a lack of respect for customer privacy.