[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ca-certificates: no more cacert.org certificates?!?



previously on this list Bas Wijnen contributed:

> On Tue, Apr 01, 2014 at 10:49:15PM +0100, Kevin Chadwick wrote:
> > >  I think at Debian we all agree that it would be a good
> > > thing if everything would be encrypted, so this is a very bad outcome.
> > 
> > I beg to differ I'm afraid. SSL should be used where it is required
> > otherwise you are opening the server upto DOS and as it is more
> > complex, bugs and exploits not to mention greater memory and cpu usage
> > in similar fashion to systemd.
> 
> That's a valid point.  I think all connections should be encrypted,
> unless the server admin knowingly disables the encryption.  Does that
> sound better?
> 
> What I would like to see, is that if someone new to making websites
> tries something, they will be using encrypted connections.  And if they
> start asking people to fill out personal data, they don't need to do
> anything extra to make sure it works right.
> 

Sorry but I still have to disagree as this shouldn't really but
certainly does still increase the chances of someone submitting data to
a site that doesn't care about the security of that data or have the
ability to look after it.

OTOH it would prevent wordpress logins being stolen so easily and ISPs
snooping, however I believe in solving specific problems not swapping
problems around, what do you know again like systemd due to it's multi
functional design or rather lack of it;-)

-- 
_______________________________________________________________________

'Write programs that do one thing and do it well. Write programs to work
together. Write programs to handle text streams, because that is a
universal interface'

(Doug McIlroy)

In Other Words - Don't design like polkit or systemd
_______________________________________________________________________

I have no idea why RTFM is used so aggressively on LINUX mailing lists
because whilst 'apropos' is traditionally the most powerful command on
Unix-like systems it's 'modern' replacement 'apropos' on Linux is a tool
to help psychopaths learn to control their anger.

(Kevin Chadwick)

_______________________________________________________________________


Reply to: