3 ms·
Just to clarify, when I said "acceptably do encryption" I meant "do encryption without requiring a user to wrestle their browser and install my certificate".
by nickysielicki 12y ago
Just to clarify, when I said "acceptably do encryption" I meant "do encryption without requiring a user to wrestle their browser and install my certificate".
- geofft 12y agoFirefox does opportunistic encryption now. :) http://arstechnica.com/security/2015/04/new-firefox-version-says-might-as-well-to-encrypting-all-web-traffic/ http://arstechnica.com/security/2015/04/new-firefox-version-... It's just that lots of other browsers are hesitant to follow suit, because OE doesn't protect you from most attacks that the average internet user would expect encryption to protect you from (e.g., you shouldn't type credit card numbers into an OE webpage). And even Firefox treats the site as http, not https, although the physical connection is over TLS on port 443. That's what, in the browsers' eyes, is "acceptable" encryption, which is what translates to the user experience of having to override the browsers' warning.