2 ms·

Here's another good reason to encrypt everything. With letsencrypt.org coming online soon, maybe browsers can start providing warnings to users that try to dow

by Osiris 11y ago

Here's another good reason to encrypt everything. With letsencrypt.org coming online soon, maybe browsers can start providing warnings to users that try to download files from regular HTTP connections; though that wouldn't prevent this problem if the originating website itself is nefarious.

JoshTriplett 11y ago
It'll take a while, but this does remove the last excuse sites might have for not encrypting everything. I'm hopeful that in the next decade any use of unencrypted HTTP will become suspect, such that browsers can start showing unencrypted HTTP as explicitly insecure, rather than just as the absence of signs of security. But it'll take many years to get to that point.