Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 03 Apr 2015 11:41:03 -0700
From:      Mel Pilgrim <list_freebsd@bluerosetech.com>
To:        Dieter BSD <dieterbsd@gmail.com>, freebsd-questions@freebsd.org
Subject:   Re: Why does FreeBSD insist on https?
Message-ID:  <551EDEBF.5020409@bluerosetech.com>
In-Reply-To: <CAA3ZYrAwXOp_5vfUPsEkF82UPaAqNwnTm7dw1ogf-C-X%2Bj730g@mail.gmail.com>
References:  <CAA3ZYrAwXOp_5vfUPsEkF82UPaAqNwnTm7dw1ogf-C-X%2Bj730g@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2015-04-03 10:59, Dieter BSD wrote:
> From what I've read about that attack there are better ways to prevent it
> than using https.  (I'll leave that as a exercise for the reader.)

No, please don't leave it as an exercise for us.  That's what security 
research has been doing for decades.  So far the only viable solution is 
encryption.  If you have a better solution than encryption to the 
problem of in-flight modification of data, I and the rest of human 
existence would like to hear it.





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?551EDEBF.5020409>