{"type":"rich","version":"1.0","author_name":"npub1f2nvlx49er5c7sqa43src6ssyp6snd4qwvtkwm5avc2l84cs84esecrwet","author_url":"https://nostr.ae/npub1f2nvlx49er5c7sqa43src6ssyp6snd4qwvtkwm5avc2l84cs84esecrwet","provider_name":"njump","provider_url":"https://nostr.ae","html":"📅 Original date posted:2013-12-08\n📝 Original message:On Sun, Dec 8, 2013 at 11:16 AM, Drak \u003cdrak at zikula.org\u003e wrote:\n\u003e BGP redirection is a reality and can be exploited without much\n\nYou're managing to argue against SSL. Because it actually provides\nbasically protection against an attacker who can actively intercept\ntraffic to the server. Against that threat model SSL is clearly— based\non your comments— providing a false sense of security.\n\nWe _do_ have protection that protect against that— the pgp signature,\nbut they are far from a solution since people do not check that.\n\n(I'm not suggesting we shouldn't have it, I'm suggesting you stop\narguing SSL provides protection it doesn't before you manage to change\nmy mind!)"}