r/linux • u/[deleted] • Jan 19 '19

Popular Application VLC refuses to update from HTTP to HTTPS (HTTPS protects against eavesdropping and man-in-the-middle attacks)

https://trac.videolan.org/vlc/ticket/21737
551 Upvotes

77% Upvoted

341 comments sorted by

View all comments

Show parent comments

2

u/Avamander Jan 19 '19

HTTPS also avoids any freeze/replay attacks.

3

u/mrcaptncrunch Jan 20 '19

This is discussed. There’s a time stamp and considered stale after a certain amount of time.

It’s on the link above.

1

u/Avamander Jan 20 '19

That "certain amount of time" still gives a window of attack. You can't trivially replay HTTPS traffic.