Hacker News new | ask | show | jobs
by 7952 4531 days ago
The problem is that HTTPS is very difficult to audit, we just have to trust that it is being done correctly.

How do you know that the apparently random stream of bits is actually properly encrypted and does not leak private data? It would be better to let the OS add the SSL layer and only let apps talk HTTP. This would give the user much more control.