Hacker News new | past | comments | ask | show | jobs | submit login

I think his point is not that TLS is not good at securing information from the host to the viewer, his point is that in doing so, it leaks information about the viewer to the host and potentially to third parties. For public information, TLS effectively asks each viewer to sign the guest register in return for seeing the page.

Contrast this with the case where you could download one giant file with hashes for millions of public sites. Once you have a copy of that file, you can now fetch a copy of any of those pages from any source you like, and still validate that your copy is authentic without losing any trace that you accessed that file.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: