IssueRaiser

It isn't really mentioned, but another reason why using HTTP is unfortunate is due to capturing paywall endpoints that are found in locat...

It isn't really mentioned, but another reason why using HTTP is unfortunate is due to capturing paywall endpoints that are found in locations such as planes, hotels, etc. If you have software installed to monitor/whitelist all outbound connections, it is extremely frustrating to see your OS services attempting to talk to GoGo's server or some hotel WiFi man-in-the-middle prior to you authenticating and bringing up net access. Fairmont Hotels was actively inserting DIVs into unencrypted sites. Why would I want actors like this to receive any of my traffic? You have to trust Apple at some point, but it would still reassure the public if they pinned certs and you could visibly see the OS only talking to their servers.

Posted by apaprocki on Jun 11, 2015, 6:55 PM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.6,000 issues0 comments

hackernews (SaaS)

It isn't really mentioned, but another reason why using HTTP is unfortunate is due to capturing paywall endpoints that are found in locat...

apaprockiJun 11, 2015, 6:55 PM

It isn't really mentioned, but another reason why using HTTP is unfortunate is due to capturing paywall endpoints that are found in locations such as planes, hotels, etc. If you have software installed to monitor/whitelist all outbound connections, it is extremely frustrating to see your OS services attempting to talk to GoGo's server or some hotel WiFi man-in-the-middle prior to you authenticating and bringing up net access. Fairmont Hotels was actively inserting DIVs into unencrypted sites. Why would I want actors like this to receive any of my traffic? You have to trust Apple at some point, but it would still reassure the public if they pinned certs and you could visibly see the OS only talking to their servers.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue