corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0d3fe-ef5f-7092-b3e0-a9525cff07b8

Understanding the Limitations of HTTPS

text/plain – ericlaw talks about security, the web, and software in general · published 14 February 2018

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at textslashplain.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
41
Words captured
1,634

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://medium.com/matter/heres-why-public-wifi-is-a-public-health-hazard-dd5b8dcb55e6
medium.com
HTTPS Only Works If You Use It – Tipster Edition Read at the source ↗
textslashplain.com
https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
en.wikipedia.org
Strict-Transport-Security for *.dev, *.app and more Read at the source ↗
textslashplain.com
https://caniuse.com/
caniuse.com
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/block-all-mixed-content
developer.mozilla.org
https://mixed-script.badssl.com
mixed-script.badssl.com
https://very.badssl.com
very.badssl.com
https://www.chromestatus.com/feature/4926989725073408
chromestatus.com
Seek and Destroy Non-Secure References Using the moarTLS Analyzer Read at the source ↗
textslashplain.com
Email Tracking Links are the Worst Read at the source ↗
textslashplain.com
https://blogs.msdn.microsoft.com/ieinternals/2009/12/07/understanding-certificate-name-mismatches/
blogs.msdn.microsoft.com
https://bugs.chromium.org/p/chromium/issues/detail?id=1091403
bugs.chromium.org
Thoughts on DNS-over-HTTPS Read at the source ↗
textslashplain.com
https://twitter.com/Alby/status/824157043636469760
twitter.com
https://hackerone.com/reports/29835
hackerone.com
https://arxiv.org/abs/1403.0297
arxiv.org
http://www0.cs.ucl.ac.uk/staff/G.Danezis/papers/TLSanon.pdf
www0.cs.ucl.ac.uk
https://www.ietf.org/proceedings/95/slides/slides-95-nmlrg-7.pdf
ietf.org
http://blog.zorinaq.com/?e=81
blog.zorinaq.com
https://en.wikipedia.org/wiki/BREACH
en.wikipedia.org
https://blog.cloudflare.com/a-solution-to-compression-oracles-on-the-web/
blog.cloudflare.com
https://developer.mozilla.org/en-US/docs/Web/API/Document/referrer
developer.mozilla.org
Improving Privacy by Limiting Referrers Read at the source ↗
textslashplain.com
Certified Malice Read at the source ↗
textslashplain.com
Extended Validation Certificates – The Introduction Read at the source ↗
textslashplain.com
https://scotthelme.co.uk/are-ev-certificates-worth-the-paper-theyre-written-on/
scotthelme.co.uk
https://i0.wp.com/textslashplain.com/wp-content/uploads/2017/01/image53.png
i0.wp.com
https://www.troyhunt.com/cloudflare-ssl-and-unhealthy-security-absolutism/
troyhunt.com
https://www.youtube.com/watch?v=Ef7W-SjueS4
youtube.com
Taking Off Your NameTag Read at the source ↗
textslashplain.com
https://hackernoon.com/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5
hackernoon.com
https://twitter.com/ericbaize/status/492777221225213952
twitter.com
https://i0.wp.com/textslashplain.com/wp-content/uploads/2017/01/nosilverbullets.png
i0.wp.com
Client Certificate Authentication Read at the source ↗
textslashplain.com
https://stackoverflow.com/questions/15245718/why-make-use-of-https-when-fiddler-can-decrypt-it
stackoverflow.com
https://developer.mozilla.org/en-US/docs/Web/HTTP/Public_Key_Pinning
developer.mozilla.org
Spying on HTTPS Read at the source ↗
textslashplain.com
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
developer.mozilla.org
https://arstechnica.com/security/2016/07/https-is-not-a-magic-bullet-for-web-security/
arstechnica.com
https://www.eff.org/pages/tor-and-https
eff.org