Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> header enrichment will be solved by requiring encryption à la Let's Encrypt

I doubt this is the case. How many bits can be manipulated in client TLS headers by a MITM without causing breakage? I find it hard to believe TLS leaves no room for malleability early on in the handshake.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: