4 ms·

I think it would be interesting to measure how well sites maintain their HTTPS too. I occasionally see improperly-configured certificate warnings (on corporate

I think it would be interesting to measure how well sites maintain their HTTPS too. I occasionally see improperly-configured certificate warnings (on corporate and even government web sites!). It may be that anyone who set up HTTPS once last month is going to have problems in 3 months or 6 months, and may not be set up properly for the long term. In this “modern” world, it seems past time for governments to start supplying digital IDs. Why for instance can’t every single person have a government-backed certificate of identity once they have done all the usual things that it would take to obtain a driver’s license or passport? And if you can count on a passport being valid for 10 years, why can’t you count on a government CA (say) to continue to validate your certificate for 10 years?

dispose13432 10y ago
Because then your ability to stay private and secure is tied to the government? If we're already talking about breaking the current TLS system, a DNS based security (Browsers include DNS keys, DNS hosts site keys) makes much more sense.
riffic 10y ago
> In this “modern” world, it seems past time for governments to start supplying digital IDs. Good graces just stop. While this may seem like a step in the right direction and offer a great amount of convenience, one can only imagine how this would be abused by authoritarian powers.
- 234dd57d2c8db 10y ago
  Not just that, but the government has leaked millions of database records on everything from top-secret clearance holders to medical records to you name it. Their security posture is insulting.
cm2187 10y ago
Let's encrypt takes care of most of the maintenance. What would be great is for Microsoft to integrate let's encrypt into IIS. If someone feel like voting for that: https://windowsserver.uservoice.com/forums/310252-iis-and-web-server-role/suggestions/11609658-let-s-encrypt-integration https://windowsserver.uservoice.com/forums/310252-iis-and-we...
- deleted 10y ago
  [deleted]

dispose13432 10y ago

Because then your ability to stay private and secure is tied to the government? If we're already talking about breaking the current TLS system, a DNS based security (Browsers include DNS keys, DNS hosts site keys) makes much more sense.

riffic 10y ago

> In this “modern” world, it seems past time for governments to start supplying digital IDs. Good graces just stop. While this may seem like a step in the right direction and offer a great amount of convenience, one can only imagine how this would be abused by authoritarian powers.

234dd57d2c8db 10y ago
Not just that, but the government has leaked millions of database records on everything from top-secret clearance holders to medical records to you name it. Their security posture is insulting.

cm2187 10y ago

Let's encrypt takes care of most of the maintenance. What would be great is for Microsoft to integrate let's encrypt into IIS. If someone feel like voting for that: https://windowsserver.uservoice.com/forums/310252-iis-and-web-server-role/suggestions/11609658-let-s-encrypt-integration https://windowsserver.uservoice.com/forums/310252-iis-and-we...

deleted 10y ago
[deleted]