4 ms·
If all web traffic is encrypted end to end, then either every web site needs to pay for a tls certificate, or your isp can insert adverts into the stream anyway
by mooism2 16y ago
If all web traffic is encrypted end to end, then either every web site needs to pay for a tls certificate, or your isp can insert adverts into the stream anyway.
- agl 16y agoYou can get certificates for free at startssl.com
- mooism2 16y agoAny idea which browsers their root certificate is in? They don't seem to say in their faq.
- mmagin 16y agoThis is one of the problems with how TLS/SSL (as implemented in web browsers) conflates the seperate issues of authentication/trust and encryption.
- briansmith 16y agoHow would you implement encryption without authentication? What would stop an attacker from sending confidential information to them, if you allow them to intercept the traffic and supply their own encryption keys? You may be interested in the TLS DH_anon cipher suites and the numerous debates surrounding them.