Hacker News Reader

Comment by garganzol | Hacker News Reader

Passwords/control panels should be secure from eavesdropping. TLS perfectly covers this as for now.

In order to keep the society from diverging into rampant monopolization and totalitarization, I would propose a modification to TLS that would allow to optionally turn off encryption while preserving data integrity guarantees.

News outlets/public resources/Youtube and the whole society would all benefit from using such form of TLS.

View on HN

> In order to keep the society from diverging into rampant monopolization and totalitarization, I would propose a modification to TLS that would allow to optionally turn off encryption while preserving data integrity guarantees.

You can already use TLS with the null cypher to get the data integrity guarantees you want.

Apparently Microsoft (back in 2016) did this to for Windows Update: https://twitter.com/SwiftOnSecurity/status/74533301869746995...

So you think that it is better to everyone to know everyone's conversations rather than everyone to know just their conversations, because someone could have more conversations and that is not fair. Now that is actually dangerous, because if someone wants to misuse your data, you'd rather them have only your conversation to them, not your conversations to everyone.

In general it's only the large and powerful organizations that have the ability to eavesdrop in the first place! Removing the encryption doesn't help anyone directly.

I'm pretty sure you can publish your TLS transcripts, too. This ensures that when you want to share this data with someone they'll actually get it, and allows you to keep it private when you want.

Reply on news.ycombinator.com