Web lists-archives.com

Re: SSL not required for setup.exe download




Greetings, Lee!

> On 3/12/19, Andrey Repin wrote:
>> Greetings, Lee!
>>
>>>> It gives you false sense of security. What is worse, everybody is
>>>> attempting
>>>> to reassure this false sense on every possible occasion.
>>
>>> I don't think it's a false sense of security.  https:// isn't "safe"
>>> but it is _safer_ than http://
>>
>> Yep. Now, let's recall mcafee, norton, kaspersky, avast… and all those
>> other
>> "antiviruses" that proxy all TLS traffic through their own root certificate
>> proxy.

> But you did that to yourself.

I did not. But other people are running that setup unsuspected.

> Hopefully you evaluated the risk/reward in letting your a/v intercept everything.

Yes. That's why am I not running anything of that kind.


-- 
With best regards,
Andrey Repin
Wednesday, March 13, 2019 23:30:34

Sorry for my terrible english...