Hacker News Reader

joshuajillon Supporting Let’s Encrypt, the nonprofit making HTTPS free for all

Tor/OnionShare is at this point a better user experience than self-signed certificates.

joshuajillon Supporting Let’s Encrypt, the nonprofit making HTTPS free for all

"It is in fact quite possible – and quite common – for a firewall or other device in your network path to terminate your TLS connection with a website and then re-create a TLS connection from the device to your browser." https://www.internetsociety.org/resources/deploy360/dane/

Isn't it then possible, albeit harder to do a MITM attack at this point with HTTPS?

joshuajillon Supporting Let’s Encrypt, the nonprofit making HTTPS free for all

While I'm all for supporting Let's Encrypt, I think it showcases something very wrong with the www, which is a heavy reliance on centralized entities that eventually become single points of failure.

That being said, as long as we're on that space let's use HTTPS and support Let's Encrypt.