The other day I commented on http security but I was too oblique. Specifically, there's an issue with the Indian registrar that made it possible for a hacker to impersonate any https site. Until you update your browser. But would the hacker need to subvert dns at the same time? https://www.theregister.com/security/2026/10/20/indian-certification-authority-emudhras-private-keys-compromised-one-of-them-was-the-number-4/5304312 Richard Leir Happy Canoeing and Hiking and Biking! Sent from [Proton Mail](https://proton.me/mail/home) for Android.