Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
missblit
on Dec 6, 2019
|
parent
|
context
|
favorite
| on:
The Great Cannon has been deployed again
Baidu will serve the script over HTTPS (though firefox complained about a bad certificate), the issue is that it will also serve it over HTTP, and some 3rd party pages request the HTTP version.
ryanlol
on Dec 6, 2019
[–]
No browser will load the script from within a <script> tag because of the bad certificate, serving the script with a bad certificate achieves nothing.
simias
on Dec 6, 2019
|
parent
[–]
The whole point is that the pages being modified are served over HTTP, there's no certificate there, good or bad.
ryanlol
on Dec 6, 2019
|
root
|
parent
[–]
The whole point is that you couldn’t use the script over HTTPS even if you really wanted to.
simias
on Dec 6, 2019
|
root
|
parent
[–]
Oh okay I see what you mean now, sorry for the misunderstanding.
Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
