Hacker News new | ask | show | jobs
by davewiner 1075 days ago
did you read the part about how https doesn't protect us from the browser vendor, ie google?

They tell us to worry about man-in-the-middle attacks that might modify content, but fail to mention that they can do it in the browser, even if you use a "secure" protocol. They are the one entity you must trust above all. No way around it.