7 ms·
Simply banning any kind of legacy protocol is not exactly in good spirit. People should have freedom of choice when it comes to running THEIR OWN infrastructure
by crypt1d 11y ago
Simply banning any kind of legacy protocol is not exactly in good spirit. People should have freedom of choice when it comes to running THEIR OWN infrastructure.
- spacemanmatt 11y agoI don't think anyone was trying to tell you how to build your core application network or your home LAN. SSL Everywhere is about critical connections subject to interception.
- crypt1d 11y agoI was referring to public networks as well. I should be able to do HTTP GET to my server if I choose to do so. In the same way as I can open a socket to my server and write plain text to it.
- spacemanmatt 11y agoI think you should be able, in the sense that it should not be legally or technologically prohibited nor prohibitive. I do think there is a line, beyond which a service should be obligated to encrypt everything, and that line is somewhere around carrying others' messages, certainly around getting common carrier status for the same. Edit: I must stress, social not legal consequences should apply. I'm in no hurry to invite government scrutiny of this line.
- icebraining 11y agoThe ban is just for .gov sites. "This proposed initiative, “The HTTPS-Only Standard,” would require the use of HTTPS on all publicly accessible Federal websites and web services."