Re: HTTP is just fine

Hubert Kario <[email protected]> Tue, 24 Nov 2015 19:45:48 +0100

Newsgroups	gmane.comp.mozilla.security
Message-ID	<[email protected]>

On Tuesday 24 November 2015 17:43:48 Kevin Chadwick wrote:
> > the ship called "web without javascript" have sailed long ago,
> > reached its destination, was decommissioned, turned into tourist
> > attraction, scrapped, turned into toothpicks and finally thrown
> > into trash
> lmfao, thinking about it, there was a SSL browser exploit that
> required javascript as the attack vector recently.
> 
> > Regards,
> > Hubert Kario
> > Senior Quality Engineer, QE BaseOS Security team
> 
> God help your users. If your a user then switch to OpenBSD/LibreSSL if
> you can!!

It's rather clear that your threat assessments and the greater security 
community threat assessments don't match up. And that's OK. Maybe we are 
wrong. Maybe you're wrong. Or maybe the optimal solution lies some place 
else.

What I'm sure is that you're not doing a good job at convincing us that 
we're wrong, especially with personal attacks.
-- 
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

signature.asc (application/pgp-signature, 819 B)