Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

did you read the part about how https doesn't protect us from the browser vendor, ie google?

They tell us to worry about man-in-the-middle attacks that might modify content, but fail to mention that they can do it in the browser, even if you use a "secure" protocol. They are the one entity you must trust above all. No way around it.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: