[Cryptography] HTTP should be deprecated.

Alan Braggins alan.braggins at gmail.com
Tue Nov 12 05:04:32 EST 2013


On 11/11/13 19:49, John Kelsey wrote:
> On Nov 9, 2013, at 7:36 PM, Russ Nelson <nelson at crynwr.com> wrote:
>> I'm not going to bother encrypting connections to a website that only
>> offers up public data.
>
> There are a lot of examples of public data where it's interesting to someone that you are looking it up.  There might be people who would like to know that you are really interested in public articles on staging of breast cancer, or protease inhibitors, or gender reassignment surgery.  Some of those people might not have your best interests at heart.

Though seeing what addresses you look at can tell them a lot of
that, even if they can't read the content.
https://www.eff.org/deeplinks/2013/06/why-metadata-matters




More information about the cryptography mailing list