News for hackers. Stuff that matters.

A comment on Google Will Soon Shame All Websites That Are Unencrypted. Parent comment

Re:Google Will Soon Shame All Websites That Are Unencrypted by nitrogen on Thursday January 28, 2016 @12:39AM (#10986517)
What we really need is opportunistic unauthenticated encryption with key pinning as a fallback between CA-signed https and plain http. Beating mass passive snooping is worthwhile even if MITM is still a risk.
[ Parent | on HN ]
Re:Google Will Soon Shame All Websites That Are Unencrypted by nickik on Thursday January 28, 2016 @02:14PM (#10990457)
The Fenrir project does something like this. They first establish a encrypted connection and then you can authenticate, or not. The authentication can also be federated.

Its pretty cool, but its not production ready.

The GNUNet has multible layers and do bottum up encryption on the lower levels.

[ Parent | on HN ]
Re:Google Will Soon Shame All Websites That Are Unencrypted by lambau on Thursday January 28, 2016 @03:12AM (#10987021)
I agree! There is TCPCrypt, for example: http://www.tcpcrypt.org/
[ Parent | on HN ]