Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5821

Re: Scripts that run insecurely-downloaded code

Show all headers | View raw

Am 02.05.2020 00:51, schrieb Marcus Dean Adams:
> It's better than nothing. Even if somebody were using self signed
> certificates that aren't publicly trusted, the information would still
> be encrypted in transit. Whether the other end is trustworthy is
> another issue and up to the user and package maintainers to decide,
> but it would, at the very least, make it more difficult for a third
> party to manipulate the information between the intended endpoints.

   Yes, I agree. With https you can only make man-in-the-middle when the 
connection is established with http you can hijack the connection any 
time. Besides this https is for sure the way to go when you are using (a 
possibly unencrypted) Wifi. It prevents people around you from 
interfering with your internet connection. For the normal user you can 
not hijack a wired LAN connection unless you would hack into ISP or root 
servers. In a country which can wiretap its citizens connections but 
does not afford to bribe certification authorities the system as we have 
it now is also a protection. I just thought of the average use case 
where a build server in Europe or the US is cabled via LAN.

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Scripts that run insecurely-downloaded code "Rebecca N. Palmer" <rebecca_palmer@zoho.com> - 2020-05-01 21:20 +0200
  Re: Scripts that run insecurely-downloaded code Elmar Stellnberger <estellnb@elstel.org> - 2020-05-01 21:40 +0200
    Re: Scripts that run insecurely-downloaded code "Rebecca N. Palmer" <rebecca_palmer@zoho.com> - 2020-05-01 22:20 +0200
      Re: Scripts that run insecurely-downloaded code Paul Wise <pabs@debian.org> - 2020-05-02 03:00 +0200
        Re: Scripts that run insecurely-downloaded code estellnb@elstel.org - 2020-05-02 18:10 +0200
      Re: Scripts that run insecurely-downloaded code Davide Prina <davide.prina@gmail.com> - 2020-05-02 10:20 +0200
        Re: Scripts that run insecurely-downloaded code "Rebecca N. Palmer" <rebecca_palmer@zoho.com> - 2020-05-02 11:10 +0200
        Re: Scripts that run insecurely-downloaded code estellnb@elstel.org - 2020-05-02 18:30 +0200
          Re: Scripts that run insecurely-downloaded code Jason Fergus <leech@thefnords.org> - 2020-05-02 19:00 +0200
            Re: Scripts that run insecurely-downloaded code estellnb@elstel.org - 2020-05-02 19:30 +0200
        Re: Scripts that run insecurely-downloaded code Celejar <celejar@gmail.com> - 2020-05-03 16:40 +0200
    Re: Scripts that run insecurely-downloaded code estellnb@elstel.org - 2020-05-02 18:20 +0200
  Re: Scripts that run insecurely-downloaded code Paul Wise <pabs@debian.org> - 2020-05-02 03:20 +0200

csiph-web