HTTPS and the illusion of privacy • Hacker News Board

Re: HTTPS and the illusion of privacy

#11

Post by yompers888 » Sun, Jun 05, 2016, 10:54 PM UTC

This seems analogous to complaining about internet protocol for failing to address reliable delivery; reliability is not part of the protocol, so it would be odd to expect it. And when you do need reliability, you can elect to use TCP, and then you have that function. If you want outside observers to not see the connections you're making, then use a VPN. But the vast majority of people don't care enough about hiding the destinations of their internet traffic to bake that in to the more fundamental protocols.

I'm surprised to see this posted on such a tech-oriented site.

Re: HTTPS and the illusion of privacy

#12

Post by jdiscar » Sun, Jun 05, 2016, 11:50 PM UTC

blakesterz wrote: post #4

"Security does not mean privacy." I sometimes stumble when I try to explain how security and privacy are different and usually I'll just explain with examples. I like these examples here. When browsing a website which uses HTTPS, anyone viewing your traffic will be able to tell not only which website you’re viewing, but for how long and how frequently. (NOT really private) Though the content between you and the websi…

In this case, it might be easier to describe sending letters in a secret code to your friends. Even though the mailmen can read everything on the envelope, they can't read anything inside.

Re: HTTPS and the illusion of privacy

#13

Post by Jeaye » Mon, Jun 06, 2016, 1:16 AM UTC

yompers888 wrote: post #11

This seems analogous to complaining about internet protocol for failing to address reliable delivery; reliability is not part of the protocol, so it would be odd to expect it. And when you do need reliability, you can elect to use TCP, and then you have that function. If you want outside observers to not see the connections you're making, then use a VPN. But the vast majority of people don't care enough about hiding…

Unfortunately, I think you've missed the point. My goal was not to complain about anything, it was to raise attention to the fact that security doesn't mean privacy. As a tech site for all types of people, it seems to be the ideal forum for targeting those interested in privacy who fall victim of assumptions and misinformation regarding security.

My guess is that you don't fall into the target audience, as you already have this knowledge.