3 ms·
That's a hot take. Do you never do anything on the web which you don't want your ISP to have full access to? That said, I agree HTTPS is too complicated to set
by anderspitman 5y ago
That's a hot take. Do you never do anything on the web which you don't want your ISP to have full access to?
That said, I agree HTTPS is too complicated to set up, even with ACME/LetsEncrypt. I wish you could just set up your own certificate with the public key in your DNS records. But that requires DNSSEC/DoH or similar.
- bullen 5y agoMost ISPs in Sweden have root certificates. I use this for security: https://datatracker.ietf.org/doc/html/rfc2289 https://datatracker.ietf.org/doc/html/rfc2289 Trying to avoid MitM attacks from your ISPs is really an exercise i futility, and a really expensive one at that, both energy and timevise. HTTP, DNS and SMTP are the only protocols you need. Small web uses small protocols, big web uses big protocols.