4 ms·
Better than "can't do HTTP" which seems to get more common every year. I prefer this kind of info site being HTTP-only to being HTTPS-only. HTTPS causes occasio
by posix_me_less 6y ago
Better than "can't do HTTP" which seems to get more common every year. I prefer this kind of info site being HTTP-only to being HTTPS-only. HTTPS causes occasional problems with certificates and some people can't use HTTPS.
- ben_w 6y ago> some people can't use HTTPS This is surprising, can you go into more depth?
- coddle-hark 6y agoI guess if you don’t have direct internet access then sniffing wifi traffic at the local coffee shop might be the only way to get weather updates.
- sgt 6y agoOne example would be running a client on hardware not capable of performing encryption fast enough. I think would be particularly relevant to web browsers on Amiga.
- mnw21cam 6y agoTo be honest, the decryption burden is fairly small compared to the layout burden. I don't think this is much of an excuse.
- sgt 6y agoBut that brings us into a completely different discussion: if you require JavaScript in your browser
- ben_w 6y agoMy Chrome settings are to disable by default, and I only reenable it selectively. Unfortunately, yes, it is sometimes necessary.
- mnw21cam 6y ago> it is sometimes necessary. [Citation needed]
- ben_w 6y agoIn general? Employer-mandated web apps. In my personal case? OpenStreetMap/Google maps.
- sgt 6y agoThere are extremists out there who submit the URL they would like to view, then receive it on e-mail later on in a document like format they are comfortable using and that does not track you.
- MaxBarraclough 6y agoNot sure if this is what they had in mind, but certain very old devices won't cope with modern HTTPS. Old smartphones, for instance. This may be a real concern in less wealthy parts of the world, but I doubt it applies to Australia.
- detaro 6y agoThere's enough change in the ecosystem that outdated OSes (that people still use) often can't handle the current recommendations for which TLS versions to allow, don't have root certificates for newer certificates, ..., so how to set that up is an interesting balance if you need to reach as many people as possible (which for government info sites is probably the case)
- NeutronStar 6y agoSo we should let them run mitm-able websites in the name of unsupported OSes that can't be arsed to keep their version of openssl up to date?
- posix_me_less 6y ago* in China TLS 1.3 is blocked by the state firewall * based on past reading of discussions here, in some states using encryption may be illegal, not sure if this is really the case, this may eventually come to the West as well, see Australia and U.S. officials attacks on encryption * old computers/OS/browser that the user can't update