How to protect the site from traffic substitution by the provider?

W

wwwAlexandr2018-08-20 15:51:42

Burglary protection

wwwAlexandr, 2018-08-20 15:51:42

Hello. Cellular operators replace traffic on sites without ssl and insert their Proof ads
there:
https://vc.ru/35975-tele2-stal-pokazyvat-polzovate...
https://meduza.io/shapito/2017/11/ 22/megafon-nacha... I
recently noticed such ads on all sites in large numbers. I have a site without ssl.
Question: how to protect yourself from this without https?
CSP? Lots of confusion and problems.
Maybe there are other ways?

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

F

Fixid, 2018-08-20
@Fixid

No way, install SSL.
In fact, now the data is transmitted in clear form and you can do anything with it on the way to the client.
For this, they came up with SSL to protect against changes in the middle

V

Vladimir Bobylev, 2018-08-21
@ShturmN

And what is the trouble? The same Reg.ru gives a certificate for free (maybe of course there was a promotion, but I took it to one of the sites). And it doesn't cost much money either. And it mounts in five minutes. Yes, and a site without https, today - is no longer solid.

V

Viktor Taran, 2019-05-27
@shambler81

https