Comment by cramforce | Hacker News Reader

Top New Best Ask Show Jobs

Comment by cramforce | Hacker News Reader

Parent Full thread

The MITM can be avoided by using Signed Exchanges. https://developers.google.com/web/updates/2018/11/signed-exc...

That only works for static content, right?

No, they can be created on the fly. That basically makes it a TLS signing Oracle.

Reply on news.ycombinator.com