4 ms·

Not to pound on you digitalsushi, I don't imagine you have a say in the policy, but .. "we are prohibited from using HTTP but we do not require our certificates

by ldng 7y ago

Not to pound on you digitalsushi, I don't imagine you have a say in the policy, but .. "we are prohibited from using HTTP but we do not require our certificates to be up to date" WHAT'S THE F%@#ING POINT if you do not require proper certificate ?!?! I've been saying for many years that the HTTPS everywhere is not a good idea and would end up in false sens of security. It's like green-washing; everybody pretend doing it except not really .... Luckly, in the case of Apt it does not matter much but there are other cases of blind-https-all-the-thing-stupidly where it does.

digitalsushi 7y ago
No offense taken, there's a large city's worth of people at this company. I definitely have nothing to do with the TLS governance board's policies. There are so many competing, parallel efforts to solve problems, that generally everything is a bit mediocre in terms of what is available. It requires a bit of a forced-optimist persona to remain creative and upbeat. On the other hand, when I go back to a small company, the sense of technical freedom should feel remarkable.