6 ms·

People also expect their postcards to arrive untampered. ISPs, Comcast in particular, inject ad-loading javascript into HTTP pages. https://arstechnica.com/te

People also expect their postcards to arrive untampered. ISPs, Comcast in particular, inject ad-loading javascript into HTTP pages. https://arstechnica.com/tech-policy/2014/09/why-comcasts-javascript-ad-injections-threaten-security-net-neutrality/ https://arstechnica.com/tech-policy/2014/09/why-comcasts-jav... https://www.reddit.com/r/technology/comments/9b5ikd/ https://www.reddit.com/r/technology/comments/9b5ikd/

ipaddr 5y ago
In fairness isn't that a result of your relationship with your isp? If you remain because of price or no other services available why wouldn't you use a vpn knowing your isp is a hostile actor and probably trying to deeply inspect packets, etc?
- hutrdvnj 5y ago
  Because if you use HTTP over VPN, then you really have to trust your VPN provider. Why should you do that?
  - ipaddr 5y ago
    You can be your own vpn provider if thats a big concern. Your isp knows you visited a certain domain with https. That's a concern.
    - hutrdvnj 5y ago
      > You can be your own vpn provider if thats a big concern. You just shift the trust around. Now I have to trust the hoster, e.g. OVH instead of my local ISP. Really the best thing you can do is end-to-end encryption, don't send plaintext over the internet. > Your isp knows you visited a certain domain with https. That's a concern. How about DNS over HTTPS?
- deleted 5y ago
  [deleted]
- alexander-litty 5y ago
  >isn't that a result of your relationship with your isp? Any ISP is allowed to sniff and manipulate packets, so this isn't just about my ISP -- it's the server's ISP as well as any entities in-between. Even if I did (assuming that I reasonably could!) change my ISP, that's changing only one of the potentially many hostile actors. >why wouldn't you use a vpn That would require me to trust the connection between the VPN and the server. Plus, then I would need to buy a VPN subscription :) Just serve HTTPS!
  - ipaddr 5y ago
    https gives your isp any domain name you visit. A vpn would hide that. A vpn moves any legal situation into a country with different laws.

ipaddr 5y ago

In fairness isn't that a result of your relationship with your isp? If you remain because of price or no other services available why wouldn't you use a vpn knowing your isp is a hostile actor and probably trying to deeply inspect packets, etc?

hutrdvnj 5y ago
Because if you use HTTP over VPN, then you really have to trust your VPN provider. Why should you do that?
- ipaddr 5y ago
  You can be your own vpn provider if thats a big concern. Your isp knows you visited a certain domain with https. That's a concern.
  - hutrdvnj 5y ago
    > You can be your own vpn provider if thats a big concern. You just shift the trust around. Now I have to trust the hoster, e.g. OVH instead of my local ISP. Really the best thing you can do is end-to-end encryption, don't send plaintext over the internet. > Your isp knows you visited a certain domain with https. That's a concern. How about DNS over HTTPS?
deleted 5y ago
[deleted]
alexander-litty 5y ago
>isn't that a result of your relationship with your isp? Any ISP is allowed to sniff and manipulate packets, so this isn't just about my ISP -- it's the server's ISP as well as any entities in-between. Even if I did (assuming that I reasonably could!) change my ISP, that's changing only one of the potentially many hostile actors. >why wouldn't you use a vpn That would require me to trust the connection between the VPN and the server. Plus, then I would need to buy a VPN subscription :) Just serve HTTPS!
- ipaddr 5y ago
  https gives your isp any domain name you visit. A vpn would hide that. A vpn moves any legal situation into a country with different laws.