Re: Call for Adoption: Encrypted Content Encoding

On 30.11.2015 11:42, John Mattsson wrote:
> I think this should be used in addition to HTTPS. TLS is not the 
> solution to everything. In the WebPush scenario, using only HTTPS 
> would lead to the Push Service having access to, and being able to 
> modify the content. Content-enryption + HTTPS looks like a good 
> general solution that can be used independently of content-type. 
and how would this prevent the security impact I mentioned?