HTTPS does not protect you against sending data to a host owned by another compa... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

woot01 on Oct 21, 2016 | parent | context | favorite | on: DDoS Attack Against Dyn Managed DNS

HTTPS does not protect you against sending data to a host owned by another company.

aianus on Oct 21, 2016 | [–]

Yes it does, the cert presented by api.othercompany.com would not pass validation when you're trying to open a connection to api.intendedcompany.com.

leesalminen on Oct 21, 2016 | [–]

Correct, but they wouldn't be able to decrypt the data.

icebraining on Oct 22, 2016 | [–]

The data doesn't even get there, the handshake kills the connection before that.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact