31–40 of 438 posts
7TB of compressed text? I don't think humanity has generated that much written words in it's entire existence. Although it would be an interesting Fermi Problem to estimate (and don't forget just how well text compresses). This has to be a lot of duplicates or bad formats (images). This would be far more useful to people with some curating.
Earlier quoted context omitted.
They still know which sites you visit even with https.
only the destination IP. TLS encryption is inside tcp and around the http protocol.
7TB of compressed text? I don't think humanity has generated that much written words in it's entire existence. Although it would be an interesting Fermi Problem to estimate (and don't forget just how well text compresses). This has to be a lot of duplicates or bad formats (images). This would be far more useful to people with some curating.
Earlier quoted context omitted.
only the destination IP. TLS encryption is inside tcp and around the http protocol.
Until ESNI becomes mainstream (and browsers offer the ability to enforce it), the domain name is also sent out in plaintext.
https://blog.mozilla.org/security/2021/01/07/encrypted-clien...
Please don't flag it this time. Folks deserve the option to at least be aware of it and decide for themselves if they wish to pursue it.
Earlier quoted context omitted.
It's a read only blog with 2 pages. What do you gain for putting this over HTTPS?
The same thing you always get. Assurance that your free Wi-Fi hotspot isn’t tampering with the page.
I'm not that offended, and torrents are only available via TOR anyway, but I do actually appreciate the sentiment. There's no reason to be not using TLS.
Earlier quoted context omitted.
Until ESNI becomes mainstream (and browsers offer the ability to enforce it), the domain name is also sent out in plaintext.
ESNI has been dropped, a new spec alters how it works and renames it Encrypted client hello (ECH) https://blog.mozilla.org/security/2021/01/07/encrypted-clien...
I wonder if there are any search engines dedicated to indexing these kinds of libraries. I know there's a decent one just for scihub, but it would be awesome if I could do a Google-style search that returned the contents of books, magazines and journal articles instead of just websites.
Earlier quoted context omitted.
https won't keep your ISP from knowing you visited the site. And the rest of those? For a text-only blog, they seem kinda trivial.
> https won't keep your ISP from knowing you visited the site If you use DoH, yes it does. Unless I'm mistaken. They only know the IP address of the remote server.
HTTP-only makes me weary of visiting a self-professed piracy site. They couldn't even spring for a Let's Encrypt cert?
*wary For some reason I'm seeing this mistake more and more lately. https://en.wiktionary.org/wiki/weary vs https://en.wiktionary.org/wiki/wary