logoalt Hacker News

brewmarchetoday at 5:29 PM2 repliesview on HN

Without HTTPS someone could alter the content, spread false information, inject ads, malware, and other stuff, redirect to some other site, …

(This is a general remark, but it goes for a blog post like this as well.)


Replies

himata4113today at 6:03 PM

It's still a weak argument since it's extremely rare in practice that's why I suggested blaming the ISP instead since ISP's are the ones that have historically tampered with http content.

show 1 reply
Joker_vDtoday at 5:46 PM

The site owners could do all of that even with HTTPS, and no-one would revoke their certs. Just saying.

And the best Windows malware is actually digitally signed.