Hacker News new | ask | show | jobs
by webmaven 1858 days ago
> It's really not. Ever had your ISP inject shit into your pages?

This. And all the other skulduggery that MITM attacks enable.

I'm kind of surprised that none of the powers-that-be ever pushed for an HTTPS mode that merely signs requests and responses rather than encrypting them, in an effort to undermine encryption advocates.