HTTPS does not protect you against sending data to a host owned by another compa... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		woot01 on Oct 21, 2016 \| parent \| context \| favorite \| on: DDoS Attack Against Dyn Managed DNS HTTPS does not protect you against sending data to a host owned by another company.

aianus on Oct 21, 2016 | [–]

Yes it does, the cert presented by api.othercompany.com would not pass validation when you're trying to open a connection to api.intendedcompany.com.

leesalminen on Oct 21, 2016 | [–]

Correct, but they wouldn't be able to decrypt the data.

icebraining on Oct 22, 2016 | [–]

The data doesn't even get there, the handshake kills the connection before that.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact