Commit graph

5 commits

Author SHA1 Message Date
Udit Patel
84340c1e4c Mixed content weakens HTTPS fix9 (#619)
Mixed content weakens HTTPS
Requesting subresources using the insecure HTTP protocol weakens the security of the entire page, as these requests are vulnerable to man-in-the-middle attacks, where an attacker eavesdrops on a network connection and views or modifies the communication between two parties. Using these resources, an attacker can often take complete control over the page, not just the compromised resource.

Although many browsers report mixed content warnings to the user, by the time this happens, it is too late: the insecure requests have already been performed and the security of the page is compromised. This scenario is, unfortunately, quite common on the web, which is why browsers can't just block all mixed requests without restricting the functionality of many sites.
2018-06-10 12:47:29 -07:00
Grindelek
2a6c64a354 Grammar correction of the news 2018-04-04 19:24:46 +02:00
Maxime St-Pierre
75ba68a885 Author are now link to the bio.md 2018-01-22 21:48:03 -05:00
Alex Grintsvayg
bd20c151e7 lots of spelling/grammar/typo fixes from @SimonKev 2017-07-13 14:43:19 -04:00
Alex Grintsvayg
8b7e7b9c2e its content, not posts 2016-09-07 22:01:30 -04:00
Renamed from posts/news/28-the-dmcas-chilling-effect-on-security-research-and-innovation.md (Browse further)