Chrome’s address bar will use https:// by default • Hacker News Board

Re: Chrome’s address bar will use https:// by default

#461

Post by katbyte » Sat, Mar 27, 2021, 10:22 PM UTC

midasuni wrote: post #428

katbyte wrote: post #421

Earlier quoted context omitted.

i'm not sure i follow, what does split DNS have to do with DoH? i don't want my internal DNS addresses public, there is no need + security and for some addresses i have different IPs internal vs external.

Browsers send to external provider like google, rather than the network provided server which has the internal addresses (and which may override external addresses for various reasons)

split-dns will never die, it would kill far to many internal corp environments where there is no public DNS entries.

Re: Chrome’s address bar will use https:// by default

#462

Post by Wowfunhappy » Sun, Mar 28, 2021, 10:20 PM UTC

throwaway53453 wrote: post #459

Wowfunhappy wrote: post #450

Earlier quoted context omitted.

An instant messaging client shouldn’t be executing arbitrary remote code, no.

It's not really possible to prevent that. E.g. a well crafted image can easily trigger an RCE on some older versions of Android: https://nakedsecurity.sophos.com/2019/02/08/android-vulnerab... Issues like this exist at all layers of the stack, so anything touching the internet needs regular security patches.

I agree completely. But, I also think that in most cases, if a simplistic piece of software like an IM app needs a security patch every three months, regularly, it's a sign the attack surface is too large.

Re: Chrome’s address bar will use https:// by default

#463

Post by birksherty » Mon, Apr 05, 2021, 3:35 PM UTC

NoSorryCannot wrote: post #121

birksherty wrote: post #101

Earlier quoted context omitted.

Https existed before icon, it shows in url. What's the point of icon when it's already written before?

The icon is arguably more accessible to the casual user.

Hiding a important part of anyhting is not ok. It even comes while copy paste. This is also not a either or case, both can be shown same time.