Live data from Hacker News

Should All Web Traffic Be Encrypted?

codinghorror.com

21–30 of 136 posts

Re: Should All Web Traffic Be Encrypted?

#21
post #7

Sorry, off-topic, but as a fan it really bugs me that graphic halfway down appears taken without attribution from Hyperbole and a Half. http://hyperboleandahalf.blogspot.com/

You know it's become a huge internet meme right? http://www.google.com.au/search?q=x+all+the+things&oq=x+... .

Does rampant theft make theft any more acceptable?

Re: Should All Web Traffic Be Encrypted?

#22
post #10

Earlier quoted context omitted.

> is definitely stored in plain text in the googlesphere have a source for that?

By definition, since Google can index email and mine it for keywords, they have access to the contents of it, which makes it isomorphic to plaintext.

That's not the same thing though. Plain text is a security risk because users tend to reuse passwords. If it's hashed then that wouldn't be the case, even if they can mine it or whatever.

Re: Should All Web Traffic Be Encrypted?

#23
There was an article posted a while back that seems like it might be relevant here (especially with the doubting of SSL being feasible to deploy for everyone). It discussed how many sites use OpenSSL improperly or in a poorly configured way that causes it to be more expensive than it needs to be. I hate doing this, but I also have been looking for the link for a while with no success.

Re: Should All Web Traffic Be Encrypted?

#24

Funny that https://stackoverflow.com/ certificate is not valid.

To be fair, Jeff Atwood recently left Stack Exchange (amicably, of course): http://www.codinghorror.com/blog/2012/02/farewell-stack-exch...

I thought is last day was March 1?

or... have i been working on this bug for way to long?

Re: Should All Web Traffic Be Encrypted?

#25
post #20

I use the EFF's Firefox addon called "HTTPS Everywhere". It has a list of websites that have HTTPS enabled, and whenever your browser is directed to the plain-HTTP version, it will go to the HTTPS version instead. https://www.eff.org/https-everywhere A useful (but tbh kinda annoying) companion addon is the HTTPS Finder. It checks to see if the website you're currently browsing also has an HTTPS version, and will add…

HTTPS Finder dev here - If you go into settings you can turn off the auto-redirect to HTTPS or the actual drop down alerts (or both).

Then you can go into Preferences > Advanced after some browsing, and you'll see a list of all the good sites found. You can create HTTPS Everywhere rules directly from there, without ever being annoyed during your normal browsing.

Re: Should All Web Traffic Be Encrypted?

#26
post #10

Earlier quoted context omitted.

> is definitely stored in plain text in the googlesphere have a source for that?

By definition, since Google can index email and mine it for keywords, they have access to the contents of it, which makes it isomorphic to plaintext.

That could be done on the client side, reading the text on the page, like I assume they do for every other AdSense-enabled page.

Re: Should All Web Traffic Be Encrypted?

#27
post #22

Earlier quoted context omitted.

By definition, since Google can index email and mine it for keywords, they have access to the contents of it, which makes it isomorphic to plaintext.

That's not the same thing though. Plain text is a security risk because users tend to reuse passwords. If it's hashed then that wouldn't be the case, even if they can mine it or whatever.

If the content of the email were hshed then the recipient couldn't read it!

Re: Should All Web Traffic Be Encrypted?

#28
post #26

Earlier quoted context omitted.

By definition, since Google can index email and mine it for keywords, they have access to the contents of it, which makes it isomorphic to plaintext.

That could be done on the client side, reading the text on the page, like I assume they do for every other AdSense-enabled page.

It's not though. Training the data models for Priority Inbox would also require access to message contents and metadata and happens offline in batch.

Re: Should All Web Traffic Be Encrypted?

#30

Earlier quoted context omitted.

You know it's become a huge internet meme right? http://www.google.com.au/search?q=x+all+the+things&oq=x+... .

Does rampant theft make theft any more acceptable?

The taboo against "theft" is a cultural norm, and now there's a new cultural norm.
Post reply on HN