Remix.run Logo
sam_lowry_ 6 days ago

Why? Should it use the dict protocol, then?

mattmanser 6 days ago | parent | next [-]

Because without HTTPS it's trivial to MITM that clipboard content if they're always sending it via http.

People in your coffee shop on the same WiFi could read it.

I get some people don't realize that's how TCP/IP works and the firesheep stuff all happened 15 years ago. But a bit worrying to see a frequent HN contributor challenging that.

That's why we now push for Https everywhere.

charcircuit 5 days ago | parent | next [-]

>People in your coffee shop on the same WiFi could read it.

WEP has been deprecated for over 2 decades.

__MatrixMan__ 5 days ago | parent | prev [-]

Https everywhere is a good start, it keeps the other plebs at the coffee shop out of your business. But it's still open to anyone with enough power to coerce a CA, which is the more concerning sort of adversary anyhow. So yes, https everywhere, but let's not stop there.

rootnod3 6 days ago | parent | prev [-]

How about HTTPS?