3 ms·
HTTP encryption is a bit overrated. Governments only care about which sites you read and httpS don't help against that. TSL is also designed to be man-in-the-mi
by z3t4 3y ago
HTTP encryption is a bit overrated. Governments only care about which sites you read and httpS don't help against that. TSL is also designed to be man-in-the-middle'd. Check your root certificates and ask yourself if you trust all those organizations. You will also likely find your ISP has a root certificate. The TLS handshake takes a lot of computer resources and makes your web experience slower. Encryption is good when you login to your bank over a random public wifi. It's unnecessary for public and open web sites that don't require username/password to login.
- pas 3y agowhat's the status of DoH deployment and ESNI?
- criddell 3y agoHTTPS also protects us against attack tools like China’s Great Cannon. https://citizenlab.ca/2015/04/chinas-great-cannon/ https://citizenlab.ca/2015/04/chinas-great-cannon/
- spacebanana7 3y agoHTTPS still provides some protection against MITM attacks. Also restricts the ability of ISPs to inject ads into other people's sites.
- kryptiskt 3y agoHTTPS by default came just in time for protecting us from ubiquitous injected ads from ISPs and wifi APs, we are lucky to not have experienced the worst of that.