Re: Draft finding - "Transitioning the Web to HTTPS"

On 2015-01-19 13:51, Paul Libbrecht wrote:
> ...
> Please stop saying we are steadily under attack. We are not.

My understanding is that yes, indeed, we are: 
<http://www.theguardian.com/uk/2013/jun/21/gchq-cables-secret-world-communications-nsa>

> And in many many many cases in common use on the web, we do not care if
> we would be.

Yes, in many cases. In many other cases, we however do.

I'm also not a fan of the "everything must be encrypted *and* 
authenticated" approach, when "encrypt as much as you can" would solve 
many of these problems as well, without introducing these other problems 
we've been discussing here. But pretending that there is no problem that 
needs to be solved doesn't help either.

Best regards, Julian

Received on Monday, 19 January 2015 21:38:29 UTC