3 ms·

Why web browsers shouldn't force sites to use SSL

• anfilt 6y ago
  I was not going to upvote this, but your comment about "lawmakers might try to regulate who can get a certificate" because it is certainly possible since CAs are well centralized... Although, not likely since browsers don't rely on just one CA, and in theory not all CAs would be in the same jurisdiction. However, it still is something to worry about since you have systems like iOS where the user has no way to side load an other browser.
• upofadown 6y ago
  >...requiring SSL encryption on websites, like many browsers are starting to do. They are?
  • anfilt 6y ago
    Like firefox has said they consider unencrypted HTTP deprecated 5 years ago. https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/ https://blog.mozilla.org/security/2015/04/30/deprecating-non... Currently, it's just you can't use new features on non-https site. However, it would not surprise if one days chrome or Firefox decide to change how they handle non-https.