Hacker News new | ask | show | jobs
by provost 3237 days ago
There are ISPs that have tools to inject arbitrary code into HTTP webpages. For example, My ISP injects notification banners into my web browser sometimes.

Even if the ISP means well at the beginning, the tool can be abused (ISPs injecting tracking, or reading the tracking information so they can sell it). Attackers at coffee shops and conferences can do much worse.

1 comments

This is the reason I finally added SSL to my academic webpage.