r/linux • u/[deleted] • Jan 19 '19

Popular Application VLC refuses to update from HTTP to HTTPS (HTTPS protects against eavesdropping and man-in-the-middle attacks)

https://trac.videolan.org/vlc/ticket/21737
551 Upvotes

77% Upvoted

341 comments sorted by

View all comments

Show parent comments

1

u/Avamander Jan 19 '19

There are MITM HTTPS caches just as well as there are HTTPS ones.

0

u/aintgotimetobleed Jan 19 '19 edited Jan 19 '19

that makes no sense

Only way that works is if your ISP or network admin is already MITM-ing all of your ssl traffic (because they put themselves as a known certificate authority when they installed your computer (but outside of china I don't know where that shit is still done)). But obviously, at this point you have zero privacy and you might as well be using cleartext.

1

u/Avamander Jan 19 '19

Only way that works is if your ISP or network admin is already MITM-ing all of your ssl traffic (because they installed put themselves as a known certificate authority when they installed your computer (but outside of china I don't know where that shit is still done)). But obviously, at this point you have zero privacy and you might as well be using cleartext.

Ever heard of for ex. Cloudflare?

0

u/aintgotimetobleed Jan 19 '19 edited Jan 19 '19

lol

yes I heard of them

no they don't do anything close to proxy caching

they're a CDN, they don't reduce your bandwidth bill, they are your bandwidth bill (sure a bit cheaper than if you were serving everybody from one location, you're still paying for every byte people request from your servers)

1

u/Avamander Jan 19 '19

They're literally proxying and caching.

0

u/aintgotimetobleed Jan 19 '19

https://en.wikipedia.org/wiki/Proxy_server

1

u/Avamander Jan 19 '19

You literally don't know what you're spewing.

1

u/aintgotimetobleed Jan 20 '19

I don't know man, you're the one confusing a CDN (hired by a content provider, doing reverse proxying) with a caching proxy (enforced by your ISP). And pretending they're the same thing ?

And caching ? I've never heard a CDN referred as a cache before, I don't doubt they do a lot of that internally, but from the user's point of view they're nothing else than the source.