Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This only helps you at all against passive adversaries.

An active adversary will just cheerfully block that HTTPS connection because you'll fall back to insecure silently.



I fully understand that and that's still clearly still better than going straight to HTTP, which it's already doing.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: