3 ms·
It's going to get worse as HTTPS everywhere becomes the unchangable default and Google/MS/Apple eventually drop HTTP/1.1 support from their browsers. Without th
by superkuh 4y ago
It's going to get worse as HTTPS everywhere becomes the unchangable default and Google/MS/Apple eventually drop HTTP/1.1 support from their browsers. Without the ability to even make a connection to an IP, not just a domain, without the approval of a third party CA corporation the web will become very much smaller and more easily controlled.
- rcoveson 4y agoWhy does this make it worse? People who can override the DNS server their ISP advertises over DHCP can't just install an open CA, or use a browser that lets them bypass certificate verification?
- vlovich123 4y agoI keep hearing this but afaik letsencrypt is free and doesn’t have restrictions on generating it.
- Wowfunhappy 4y agoLet's Encrypt is free right now, but it is still centralized. A court could order them to revoke certificates from specific websites and stop issuing new ones.
- aaomidi 4y agoAnd this is why it’s important to have these CAs in different justifications. It’s been a pain convincing companies to fund them though.
- hammyhavoc 4y agoThe more likely outcome wouldn't be a certificate being revoked, but a renewal of the certificate being declined. The certs are only valid for 3 months.
- Wowfunhappy 4y agoI don't expect the major browsers to drop HTTP for some practical reasons, namely logging into routers and captive portals.
- zoobab 4y agoThey could easily revoke your certificate, and deactivate your website.