And, congrats, your portfolio now has injected banner ads and was used to delive... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		yjftsjthsd-h on Dec 30, 2020 \| parent \| context \| favorite \| on: Our Year in Review: How we’ve kept Firefox working... And, congrats, your portfolio now has injected banner ads and was used to deliver a drive-by exploit. HTTPS is confidentiality and integrity.

belltaco on Dec 30, 2020 [–]

Why can't the portfolio page inject banner ads via HTTPS?

yjftsjthsd-h on Dec 31, 2020 | [–]

Because the modified page wouldn't be signed with that key? This is one of the basic things https does

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact