4 ms·

> If everyone has to obtain a certificate from a CA, that is another way they can be tracked They have to be tracked just as much even without that. They have

> If everyone has to obtain a certificate from a CA, that is another way they can be tracked They have to be tracked just as much even without that. They have to give their credentials to the hosting provider and to the DNS provider. Even if they didn't and plugged their server directly to the backbone, their IP address and traceroute would leak information about their location. That said, your point is valid in a parallel universe where anyone could run an anonymous server without registering for DNS or contacting an ISP or a hosting provider or anything at all. But in that universe, clients would have no way to know if that server contains valid information or data that was substituted on-the-fly. Imagine WWII-style Radio Londres, but one day the broadcast is substituted by one that looks like it comes from Charles de Gaulle, and gives the wrong instructions.

josteink 11y ago
> They have to give their credentials to the hosting provider and to the DNS provider. Back in the real world you don't need a hosting provider nor DNS to serve a website. The following is a real address: http://123.234.34.56 http://123.234.34.56 (although it doesn't currently point to any real webserver) You can probably trace the ISP it belongs to, but if that ISP is in another country than the regime you want to hide from, they need to launch a cross-country, international police-investigation, and possibly defend their claims through a trial, to get authorities in that country to force that ISP to divulge the identify of the customer at the other end of that IP. Being able to serve websites anonymously, through plain HTTP and no hosting-partner DNS is a very real option. With today's high-speed internet connections it's a more real option than ever before. Pretending this option doesn't exist doesn't lend your arguments any favour.
- lmm 11y ago
  > You can probably trace the ISP it belongs to, but if that ISP is in another country than the regime you want to hide from, they need to launch a cross-country, international police-investigation, and possibly defend their claims through a trial, to get authorities in that country to force that ISP to divulge the identify of the customer at the other end of that IP. Which is different from getting the identity of someone who registered a HTTPS certificate with a CA in another country how?
  - rgbrenner 11y ago
    CAs often have offices/etc in multiple countries. Comodo for ex: https://www.comodo.com/contact-comodo/contact-us.php https://www.comodo.com/contact-comodo/contact-us.php

josteink 11y ago

> They have to give their credentials to the hosting provider and to the DNS provider. Back in the real world you don't need a hosting provider nor DNS to serve a website. The following is a real address: http://123.234.34.56 http://123.234.34.56 (although it doesn't currently point to any real webserver) You can probably trace the ISP it belongs to, but if that ISP is in another country than the regime you want to hide from, they need to launch a cross-country, international police-investigation, and possibly defend their claims through a trial, to get authorities in that country to force that ISP to divulge the identify of the customer at the other end of that IP. Being able to serve websites anonymously, through plain HTTP and no hosting-partner DNS is a very real option. With today's high-speed internet connections it's a more real option than ever before. Pretending this option doesn't exist doesn't lend your arguments any favour.

lmm 11y ago
> You can probably trace the ISP it belongs to, but if that ISP is in another country than the regime you want to hide from, they need to launch a cross-country, international police-investigation, and possibly defend their claims through a trial, to get authorities in that country to force that ISP to divulge the identify of the customer at the other end of that IP. Which is different from getting the identity of someone who registered a HTTPS certificate with a CA in another country how?
- rgbrenner 11y ago
  CAs often have offices/etc in multiple countries. Comodo for ex: https://www.comodo.com/contact-comodo/contact-us.php https://www.comodo.com/contact-comodo/contact-us.php