2 ms·

Nobody has brought this up yet: If we deprecate HTTP, then certificates can be used as tools of censorship by governments. We require an alternative to the cu

• userbinator 12y ago
  ...and the governments will then be virtually the only ones who can still inspect traffic, since they can still get CAs to issue certificates for them. Moving everything to HTTPS dependent upon CAs only makes the whole Internet more centralised, which is horrible for privacy and anonymity. They will all say it's "for your security", and arguably having this centralised root of trust does lower risk of attacks from random groups, but at the same time it's allowing them more power. To CAs and governments, a lot of things around encryption seem to be oriented in the direction of "if we don't have control over it, we disapprove." Self-signed certs are only one example of this; see all the other issues surrounding mobile device encryption. It's only good encryption to them if they are the ones in control of it. Quite frankly, to me it seems random hacker groups have a lower chance of cooperating and tracking you in the same way that governments can. I believe the relevant quote in this situation is again the classic "those who give up freedom for security deserve neither."