Date: Fri, 18 Sep 2015 09:00:18 -0500 From: Mark Felder <feld@FreeBSD.org> To: =?ISO-8859-1?Q?Dag-Erling=20Sm=F8rgrav?= <des@des.no>, Daniel Feenberg <feenberg@nber.org> Cc: freebsd-security@freebsd.org, grarpamp <grarpamp@gmail.com>, freebsd-questions@freebsd.org Subject: Re: HTTPS on freebsd.org, git, reproducible builds Message-ID: <1442584818.1834563.387314497.1AD169D2@webmail.messagingengine.com> In-Reply-To: <86r3lvdeah.fsf@nine.des.no> References: <CAD2Ti2_YNkNi2b=PzFCwu3PVaP8hOzADys3=-k0AqvsDRhJpzA@mail.gmail.com> <alpine.LRH.2.11.1509180646470.14490@nber4.nber.org> <86r3lvdeah.fsf@nine.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Sep 18, 2015, at 08:53, Dag-Erling Sm=F8rgrav wrote: > Daniel Feenberg <feenberg@nber.org> writes: > > Is there a reason to encrypt something that is completely public? >=20 > Watering hole attacks. Watering hole attack describes the *site* being compromised because it's popular and you know the target(s) will go there. HTTPS is irrelevant. https://en.wikipedia.org/wiki/Watering_Hole --=20 Mark Felder ports-secteam member feld@FreeBSD.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1442584818.1834563.387314497.1AD169D2>