Ted Unangst wrote: > Michael McConville wrote: > > Jason Barbier wrote: > > > szs wrote: > > > > Not for security. > > > > For privacy. > > > > > > It is a read only site, the privacy you seek is breached as soon as > > > you make a DNS call to openbsd.org > > > > There are still some privacy benefits to using HTTPS. It will confound a > > lot of simple filtering and monitoring software, and what you're reading > > on the site is pretty obfuscated. It also helps security on sketchy > > networks. > > Note that simple length correlation is enough to determine what you're > reading. And this isn't even "NSA intern" difficult, it's "NSA internship > interview question" difficult.
Yes, but it is certainly "Websense" difficult, "Verizon traffic monetization dept." difficult, "nosy VPN/exit node operator" difficult, and "guy in cafe with Wireshark" difficult. I'll stop responding publicly, though.
