5 ms·
Im all for signing stuff but: - amo wasnt affected by heartbleed - signatures arent foolproof either - HTTPS everywhere.. is supposed to advocate for TLS bei
by zobzu 12y ago
Im all for signing stuff but:
- amo wasnt affected by heartbleed
- signatures arent foolproof either
- HTTPS everywhere.. is supposed to advocate for TLS being safe ?
So the criticism seems quite misguided in this case.
- Confusion 12y ago- amo wasnt affected by heartbleed If you only address issues that have already happened, you will never provide adequate protection. The point is to ensure sane behavior when AMO is affected by some exploit. - signatures arent foolproof either Yeah, and actually, why bother with HTTPS at all: it's not foolproof, is it? - HTTPS everywhere.. is supposed to advocate for TLS being safe ? No, it advocates for TLS being safe if used with HTTPS everywhere. So before you have HTTPS everywhere enabled, you need an additional measure.
- zobzu 12y agoyou contradicted yourself here - or voluntarily misunderstood the point.