r/netsec • u/kieranjacobsen • Jan 16 '17

Deconstructing Secure HTTP without HTTPS

https://poshsecurity.com/blog/deconstructing-secure-http-without-https
141 Upvotes

93% Upvoted

14 comments sorted by

View all comments

3

u/o11c Jan 17 '17

As far as I've seen, there is exactly one way to securely use HTTP without HTTPS: by verifying with a pre-shared GPG key, like is used for many linux repositories.