top | item 42212686

(no title)

bramblerose | 1 year ago

Which risk would TLS mitigate in this specific use case?

discuss

order

ndsipa_pomu|1 year ago

As with any http website, a malicious actor (e.g. someone in a coffee shop or an airport) could set up a plausible looking wifi service and then MITM the website and insert adverts or malware into the page.

However, that has been discussed on many other topics that are directly to do with TLS/certificates etc. so I don't think it's worth bringing up (aimed at the OP) every time there's an HTTP linked.

lxgr|1 year ago

With HTTPS, the site author could still do all of that, no? So I’m not convinced this is really that big of a concern on an unknown website that I’m not entering any credentials or personal information on.

batch12|1 year ago

> I don't think it's worth bringing up (aimed at the OP) every time there's an HTTP linked.

Maybe rewritten it could be viewed as a warning for those who care instead of a criticism.