Remove the-6-step-happy-path-to-https
article thumbnail

The 6-Step "Happy Path" to HTTPS

Troy Hunt

That was then covered pretty extensively by the tech press as well as on this blog where I wrote about how life is about to get a lot harder for websites without HTTPS. Either that or those who, against all evidence, continue to argue that HTTPS is unnecessary. Yep, more than doubled in a year.

258
258
article thumbnail

Weekly update 57

Troy Hunt

Beyond that, this week I have a new Pluralsight course out on the emerging threats in IoT and I've published a massive blog post on the "Happy Path" to HTTPS, all in 6 (sometimes) simple steps. really happy with the way this has been received, and especially happy to see people actually doing it!).

IoT 119
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Subresource Integrity and Upgrade-Insecure-Requests are Now Supported in Microsoft Edge

Troy Hunt

Because especially when it comes to security, there are fundamental and inherent shortcomings in everything from HTTP to HTML and many of the other acronyms that make the web work as it does today. The more time that goes by and the more deeply I give it thought, the more convinced I am that the web is held together with sticky tape.

article thumbnail

Bypassing Browser Security Warnings with Pseudo Password Fields

Troy Hunt

Let's extend that into the digital world and we'll talk about HTTPS for a bit. Not everyone was happy about this because hey, HTTPS is hard, right? It seems that there is no limit to human ingenuity when it comes to working around limitations within one's environment. Wrong again! Seeing a theme here? You should use it.

Passwords 202