Re: Draft finding - "Transitioning the Web to HTTPS"

On Wed, Dec 10, 2014 at 10:28 AM, Sam Ruby <rubys@intertwingly.net> wrote:

> I'll assert that 'http://localhost:8088/' is secure.  More precisely, if
> that can't be secured, then one needs to give up all hope.  I'd suggest that
> a web server on a camera connected via USB to a desktop is another such
> scenario.

Yes, that's why I wrote this:

http://www.chromium.org/Home/chromium-security/prefer-secure-origins-for-powerful-new-features

Mike West is formalizing these concepts in the POWER and MIX
specifications, underway now.

Received on Wednesday, 10 December 2014 18:58:34 UTC