Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Securing is different to encrypting.

Most tracking of people is done by advertising, and marketing companies. Should we mark all websites with advertising as insecure?



As much as I'd love that (seriously, not advertising per se of course but most types of cross domain tracking), something tells me that initiative is not going to originate from the Chrome team...


Ads are first-party content, in the sense that they are under the control of whoever is serving the webpage. One would hope that if the content provider were concerned about privacy, they would not choose to serve ads that violated that privacy.

On the other hand, using HTTP would open an otherwise harmless content provider to potential ad-insertion attacks by third parties. So in that sense, HTTPS really does matter here.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: