Comment on Local pop radio station is using its metadata to spread anti Biden propaganda

mojo@lemm.ee ⁨1⁩ ⁨year⁩ ago

• ccdfa@lemm.ee ⁨1⁩ ⁨year⁩ ago

  One random thing that really annoys me is that the site shakespeare.mit.edu does not properly forward http requests to https although they have an https version of the site.

  source

  • baatliwala@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Funniest thing I’ve ever seen is the docs for Nginx do the same, no http to https redirection. I mean, you would hope that the maintainers for the biggest web server in the world would be able to manage that but somehow… No they don’t.

    source

    • gatelike@feddit.de ⁨1⁩ ⁨year⁩ ago

      server serves a protocol on a port. I would rather it not include logic like that. turn off the http port of you don’t want to serve http.

      source

      • azertyfun@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

        HSTS + HTTPS redirect is the answer. It’s industry standard for a reason: it’s just as safe as pure HTTPS since you can’t get anything other than a redirect over HTTP, and HSTS protects your users from future attempted MITM attacks. The MDN page for HSTS explains it all very clearly.

        Any other implementation is an immediate audit fail in my experience.

        There’s no tangible security benefit to fully disabling port 80, and if anything depending on the service it may just drive users away to shadier alternatives.

        source
      • baatliwala@lemmy.world ⁨1⁩ ⁨year⁩ ago

        that would mean anyone going to http:// will perceive as the server being down so what you are saying will not work in practice

        source
    • abbadon420@lemm.ee ⁨1⁩ ⁨year⁩ ago

      Apache tomcat had a stupid security issue. I recently did a HackTheBox about it. Here’s a write-up of the box medium.com/…/hack-the-box-jerry-write-up-6f045601…

      source
  • diemartin@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

    Image

    source
  • Sneptaur@pawb.social ⁨1⁩ ⁨year⁩ ago

    Why does reading Shakespeare need to be over SSL?

    source

    • Takios@feddit.de ⁨1⁩ ⁨year⁩ ago

      SSL (or TLS nowadays) not only protects against surveillance but also guarantees the integrity of the data you send and receive. Without it, someone could spoof the response you receive. In practice this means injecting ads or malware or even worse: fake shakespeare!

      source

      • FlyingSquid@lemmy.world ⁨1⁩ ⁨year⁩ ago

        According to some, all Shakespeare is fake Shakespeare.

        source

        • -> View More Comments
      • Sneptaur@pawb.social ⁨1⁩ ⁨year⁩ ago

        Thanks for the explanation!

        source
      • SocialMediaRefugee@lemmy.world ⁨1⁩ ⁨year⁩ ago

        It is brutal how few people know how to implement it and how apps all seem to have their own ways of doing it. I have to keep notes for the quirks of every damn app/OS I work with that uses SSL/TLS.

        source
    • the_third@feddit.de ⁨1⁩ ⁨year⁩ ago

      At least because search engines rank TLS enabled sites higher these days. And also, wrapping everything in TLS creates more noise against surveillance and makes surveillance more expensive.

      source

      • Sneptaur@pawb.social ⁨1⁩ ⁨year⁩ ago

        So if this site has both HTTPS and HTTP versions, and it’s just Shakespeare, does it matter that much? I figure not which is why it’s not auto redirecting

        source
  • intensely_human@lemm.ee ⁨1⁩ ⁨year⁩ ago

    Why man they doth share packets in the clear

    source
  • mojo@lemm.ee ⁨1⁩ ⁨year⁩ ago

    If you are using Firefox, enable https everywhere setting and it fixes stuff like that

    source
  • SocialMediaRefugee@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Don’t you just need to toss an “.htaccess” file in the root?

    source

    • timewarp@lemmy.world ⁨1⁩ ⁨year⁩ ago

      No, an .htaccess file is specific to Apache HTTP Server… although some other web servers have integrated the format. However, most browsers now automatically redirect when an HTTPS version exists.

      source
• Yuper@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Wow, that’s funny.

  source

  • mojo@lemm.ee ⁨1⁩ ⁨year⁩ ago

    Yeah, it made me laugh out loud.

    source