Re: HTTP is just fine
Hubert Kario <[email protected]>
| Newsgroups | gmane.comp.mozilla.security |
|---|---|
| Message-ID | <[email protected]> |
On Tuesday 24 November 2015 14:19:13 Kevin Chadwick wrote: > > > The statement "HTTP is insecure" is wrong and a lie. That's my > > > problem. > > > > HTTP is insecure and HTTP can't be made secure, it's a fact > > > > existence of extensions like Firesheep prove it > > Nonsense, that is likie saying the existence of a virus/rootkit means > that Operating systems are insecure. yes, certain versions of operating systems are known to be insecure. Subsequently they got updates released and are no longer vulnerable. You can't update HTTP to not be insecure. You *can't* fix it. -- Regards, Hubert Kario Senior Quality Engineer, QE BaseOS Security team Web: www.cz.redhat.com Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
signature.asc
(application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCgAGBQJWVIKWAAoJEJKo0bgB0vX1rCoP/1J8wllYHuWSKVJmPJMsNPLT iR4Whx8fels0nEG4pTMJbpDH0Nv5OQrlXCK1UVFgDt+JNMphRZzBXSI8IEZsYQ/0 /tQgGS3Zzvv8vr3VV79OfLlk1e5/o+p+51afO5hBdZf2MlXKa8Indvem3RB2YNkz BM64Q4qy0ajlTfyRptGhKEea8SiH7QEFgHzC/tom+RaupA6lFB5vzwVoVweYdWDx xaVGM4vwJohYBFolmIDmpUF7GOYN3eD2fLZ+9wQWTGSN3DqyhML0TfX3GBKH0GjN wdBVQMg4XrudwpfmOnHCscYu/52MUtd7nCY1bHTC3hdA+vmfNsEqQ1Szeb4BF56N 2YDKUIQJkD3L6gLJeftwKwWmlWY4OJW7TmqGK67SkdRX4y5ogl8c+vvoYYuimHZs aEln8Io/1AqrkOHY9fs8YFhK8p7hCCNNJR9hVh36HS3xFjwd+Qm8xXgPhjiSJlCl sq3ddMHJB9madVwPgS0OUknOpfWT24zLCPYVc6m62mH9EYm+BD/FB9P2pU1KcI45 05dsZPKXNLEyrddXs+C0KRfocanFqzycHEeCZya6QRsVlWGVeSyT9JnU+AuMjoSf jMXUJyehV/nAIHVYn58B7ObtkoG1rK1uWC8Qz0S6r/qJG38hpY4cpjlt6le+jY3i w6R1OyNy73rIpWlPzrSW =LoA6 -----END PGP SIGNATURE-----