3 ms·
Can we start blocking regular http yet?
by lallysingh 8y ago
Can we start blocking regular http yet?
- Ajedi32 8y agoNot quite. That'd still result in blocking ~20% of requests on Windows (~30% on Linux). https://transparencyreport.google.com/https/overview https://transparencyreport.google.com/https/overview Slowly making progress though. Apparently in the US 95% of users' browsing time is spent on HTTPS sites.
- mlindner 8y agoArchLinux's package servers are http by default and include no https servers by default. We're a long way from disabling http. It's "not a problem" because packages are signed, but it's still http.
- emilfihlman 7y agoBlocking http means forcing others to subscribe to the PKI model (unless of course self signed certificates become much easier to add and use and not scary, in which case HTTPS is fine), which is neither foolproof nor end-all-solution.