2 ms·
I think the problem is that HTTPS carries the connotation of security, renaming this proposal would make it obvious to users what the expectations are. Lets ch
by fleitz 12y ago
I think the problem is that HTTPS carries the connotation of security, renaming this proposal would make it obvious to users what the expectations are.
Lets change the name of it to something like httpe e for encrypted, s for secure.
Let's change the behavior of httpe to automatically accept the first key it sees for a domain.
Browsers have the option of uploading the lists of domains and keys to their creator, Firefox, Google, etc which can then be collated and updated from the browser.
This data could be used to spot where MITM attacks are taking place.
- thanksgiving 12y agoThis is the first time I've heard of HTTPe and I love it! However, I'd like to sit on it for a bit. Let's encrypt should come out later this year. I want to give it a chance. https://www.eff.org/deeplinks/2014/11/certificate-authority-encrypt-entire-web https://www.eff.org/deeplinks/2014/11/certificate-authority-...