3 ms·
yes i can see a logical next step for state sponsored CA which can be made mandatory by isp after that only way to avoid censorship would be to use VPN but even
by elisharobinson 8y ago
yes i can see a logical next step for state sponsored CA which can be made mandatory by isp after that only way to avoid censorship would be to use VPN but even that would be less effective if the exit node ips are known(which they are), tor will also be limited(because of barrier to entry) and the only reason its still alive is because the US gov is heavy reliant on it .... are we screwed
- rolph 8y agoonly as screwed as we allow ourselves to be. authority is given by tacit consent of those subjected to it. there are free and/or open CAs and the moment cert revocation becomes a big issue is when the current CAs lose authority and are succeded by grass roots CAs. this will take some browser twiddling and brand conversion, as the current framework for HTTPS certification extends to whitelist and blacklists of ^unvetted^ certificates, in a manner homologous to emailserver blacklists. in other words, you can roll your own but the current infrastructure can blacklist it. its a big job but not yet impossible. or we could forget all this business about encrypting the protocol [HTTP>HTTPS] and simply encrypt the page moving via the protocol, when there is a concern for privacy. that being said, the whole point of publishing to the web, is so that everyone can see it. if you want to publish to an exclusive group, then use a different protocol, that is not clear in public, and not reliant on third party mechanisms.