News for hackers. Stuff that matters.
Re:Progress Towards 100% HTTPS, June 2016 by pfg on Wednesday June 22, 2016 @02:44PM (#11956055)
> Those should be distributed by the service providers, who are the actual trustworthy entities in the user's minds.

That's what HPKP does, basically, unless I'm misinterpreting what you mean with service providers.

HPKP is Trust on First Use, so it's not perfect, but the alternative - some kind of Web of Trust - is not really practical for non-technical, not-security-conscious users, IMO.

Re:Progress Towards 100% HTTPS, June 2016 by 5ilv3r on Wednesday June 22, 2016 @03:09PM (#11956220)
This looks like it still uses https. Currently I am giving openkeychain on android a try. It's trust establishment process is very interesting.

Sadly I understand https much better than alternatives, due to web hosting experience. I am trying to catch up.