☰
×
Login Register an account
Top Submissions Explore Upgoat Search Random Subverse Random Post Colorize! Site Rules Donate
3

Why isn't HTTPS enough to protect your site?

submitted by byte to programming 7 hoursMay 4, 2025 10:16:22 ago (+4/-1)     (chat-to.dev)

https://chat-to.dev/post?id=OHNlc05mNWpEck8vbUlNOXRPNkh3QT09



5 comments block

sort by: hot new top old low

[ - ] oyveyo 3 points 7 hoursMay 4, 2025 10:25:25 ago (+3/-0)

Because everything is backdoored at the hardware level?

[ - ] 2plus2equals5 1 point 4 hoursMay 4, 2025 13:59:10 ago (+1/-0)

Including your Intel CPU "with its own processor, memory, and I/O. Really just like if it was a small computer inside your computer."
https://itsfoss.com/fact-intel-minix-case/

Might be fixable. AMD supposedly has the same these days.
https://www.csoonline.com/article/562761/researchers-say-now-you-too-can-disable-intel-me-backdoor-thanks-to-the-nsa.html

[ - ] RollinDaGrassTyson 3 points 7 hoursMay 4, 2025 10:49:27 ago (+3/-0)

tl;dr:

Yet, this encryption does nothing to shield a website from other pervasive dangers. For instance, HTTPS does not inherently protect against vulnerabilities in the website's code, such as SQL injection or cross-site scripting (XSS) attacks.

In essence, while HTTPS is an indispensable component of web security, it is merely one piece of a much larger puzzle.

[ - ] JustALover -1 points 6 hoursMay 4, 2025 11:58:52 ago (+0/-1)

Thanks for that. No need to visit the content farm.

[ - ] BeholdTheLight -1 points 7 hoursMay 4, 2025 11:14:09 ago (+0/-1)

Because no amount of security will help when it comes to protecting low IQ niggers