Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you do, you probably should use https.

https://time5.nrc.ca/timefreq/bulletin_tf-b.html

There's probably some really weird MITM attack possibilities here if people have automated systems fetching and using these files. Also, following the link from the article, it would seem the US government's official source is unencrypted FTP?



Yes very true. In fact the NRC should probably set up an HTTPS redirect and HSTS.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: