3 ms·

This really makes me want to see what happens if I could make my browser only accept secure cookies (cookies sent over https only). Unfortunately I can't find

• dgoldstein0 11y ago
  on second thought... I can already do this with Chrome's built in abilities to restrict cookies and override those restrictions with exceptions. We'll see how this works. Set Chrome to block all cookies, but for https://* https://*, clear on exit. And have a few exceptions for google.com / facebook.com / etc. so I don't have to always be logging in.
• pdkl95 11y ago
  This may not be effective in some cases, given the NSA's history of targeting the plaintext before it gets wrapped in SSL. (i.e. the infamous "SSL added and removed here! :-)" sketch of Google's network[1]). Additionally, far too many sites use cloudflare (or similar) to provide their SSL creating a single point of failure and a tempting target for eavesdroppers. (and who knows how many don't bother to encrypt the requests from the SSL proxy back to the actual serve?) [1] https://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html https://www.washingtonpost.com/world/national-security/nsa-i...