11–20 of 27 posts
To this day, if you open Twitter, Facebook Groups or Discord, you’ll find people complaining about Google forcing HTTPS down people’s throat.
Earlier quoted context omitted.
While it's certainly possible the ISP could extract the data (and might be forced to by some intelligence agency), it was also possible to just listen to the data in transit. Remember that these were the days of people sending data over telephone wires.
Other than eavesdrop, the biggest advantage of HTTPS for me is to stop nasty ISP that injecting advertisement or other code in HTTP page.
The funniest thing about HTTPS is that its transition/enforcement exposed a lot of people who don’t understand why we need HTTPS everywhere, even if there are no logins (!!!) To this day, if you open Twitter, Facebook Groups or Discord, you’ll find people complaining about Google forcing HTTPS down people’s throat.
> This allowed for an enormous amount of things, but online shopping wasn't one of them. The problem was, sending credit card numbers over HTTP opened them up to theft: anyone between you and the server could keep a copy of your card information. In the 90s, what exactly would the attack vector have been? I don't imagine AOL would have wanted to steal people's credit cards. I find it odd that this was viewed as a con…
While it's certainly possible the ISP could extract the data (and might be forced to by some intelligence agency), it was also possible to just listen to the data in transit. Remember that these were the days of people sending data over telephone wires.
Earlier quoted context omitted.
While it's certainly possible the ISP could extract the data (and might be forced to by some intelligence agency), it was also possible to just listen to the data in transit. Remember that these were the days of people sending data over telephone wires.
Other than eavesdrop, the biggest advantage of HTTPS for me is to stop nasty ISP that injecting advertisement or other code in HTTP page.
Earlier quoted context omitted.
Other than eavesdrop, the biggest advantage of HTTPS for me is to stop nasty ISP that injecting advertisement or other code in HTTP page.
Can you not just choose a better ISP?
The funniest thing about HTTPS is that its transition/enforcement exposed a lot of people who don’t understand why we need HTTPS everywhere, even if there are no logins (!!!) To this day, if you open Twitter, Facebook Groups or Discord, you’ll find people complaining about Google forcing HTTPS down people’s throat.
Earlier quoted context omitted.
While it's certainly possible the ISP could extract the data (and might be forced to by some intelligence agency), it was also possible to just listen to the data in transit. Remember that these were the days of people sending data over telephone wires.
People routinely ordered by phone, reading out the card number to the person on the far end.
If people ended up buying things from me, the standard practice was for them to read out their credit card details so I could purchase things for them, in their name.
Makes me wonder what the history of HTTPS is on Hacker News. Does anyone know? Perhaps the dang (the moderator of Hacker News) knows…
Before that, all http links instead.
Earlier quoted context omitted.
People routinely ordered by phone, reading out the card number to the person on the far end.
I'm fairly sure this still happens. In 2013-2014 I worked for a company that does outsourced customer support and I worked in the department that handles customer support for logistics in a very famous fruit/computing company, via telephone. If people ended up buying things from me, the standard practice was for them to read out their credit card details so I could purchase things for them, in their name.
This is why I find it strange that the idea of sending CC information over a dialup phone line was seen as unacceptable.