On: Journalist’s phone hacked: all he had to do was visit any website

[munchbunny]

That was indeed a thing several years ago as ad networks were being forced to support HTTPS, but all of the major ad networks and ad servers have supported HTTPS for years at this point.

I don't doubt there are some bespoke ad servers or other dark corners of ad infrastructure where HTTPS support is still lacking, but that should be rare at this point.

[EdwardDiego → munchbunny]

Yep, in the industry and if your code or servers triggered mixed content warnings, publishers dropped you fast.

That said,we still have to scan every creative for https compliance because a lot of them say they are but aren't.

[OJFord → EdwardDiego]

> we still have to scan every creative for https compliance

What's 'creative' when it's a noun? A producer of 'content'?

[munchbunny → OJFord]

It refers to the payload that makes up the ad, e.g. the package of html, JS, CSS, and other assets that the browser actually loads.