You don't have to verify that your hostname matches the cert. The browser does t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tptacek on Sept 5, 2018 \| parent \| context \| favorite \| on: Email security on Democratic campaigns is as bad a... You don't have to verify that your hostname matches the cert. The browser does that for you. That's part of the point.

craftyguy on Sept 5, 2018 [–]

Not all browsers do that, and many major ones display a warning that users have been trained to click through because of at least a decade of similar browser warnings.

mcpherrinm on Sept 5, 2018 | [–]

What browsers do not?

tptacek on Sept 5, 2018 | | | [–]

NCSA Mosaic 2.0.0 (and all versions prior).

sdevlin on Sept 5, 2018 | | | [–]

Probably `M-x eww`.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact