HTTPS Deployment Growing by Leaps and Bounds

Re:HTTPS Deployment Growing by Leaps and Bounds by makecheck on Friday December 23, 2016 @12:02PM (#13245773)

I think it would be interesting to measure how well sites maintain their HTTPS too. I occasionally see improperly-configured certificate warnings (on corporate and even government web sites!). It may be that anyone who set up HTTPS once last month is going to have problems in 3 months or 6 months, and may not be set up properly for the long term.

In this “modern” world, it seems past time for governments to start supplying digital IDs. Why for instance can’t every single person have a government-backed certificate of identity once they have done all the usual things that it would take to obtain a driver’s license or passport? And if you can count on a passport being valid for 10 years, why can’t you count on a government CA (say) to continue to validate your certificate for 10 years?

[ Parent | on HN ]

Re:HTTPS Deployment Growing by Leaps and Bounds by riffic on Friday December 23, 2016 @02:55PM (#13246856)

> In this “modern” world, it seems past time for governments to start supplying digital IDs.

Good graces just stop. While this may seem like a step in the right direction and offer a great amount of convenience, one can only imagine how this would be abused by authoritarian powers.

[ Parent | on HN ]

Re:HTTPS Deployment Growing by Leaps and Bounds by 234dd57d2c8db on Friday December 23, 2016 @06:47PM (#13247866)

Not just that, but the government has leaked millions of database records on everything from top-secret clearance holders to medical records to you name it. Their security posture is insulting.

[ Parent | on HN ]

Re:HTTPS Deployment Growing by Leaps and Bounds by cm2187 on Friday December 23, 2016 @03:04PM (#13246915)

Let's encrypt takes care of most of the maintenance.

What would be great is for Microsoft to integrate let's encrypt into IIS. If someone feel like voting for that:

https://windowsserver.uservoice.com/forums/310252-iis-and-we...

[ Parent | on HN ]

Re:HTTPS Deployment Growing by Leaps and Bounds by dispose13432 on Friday December 23, 2016 @01:02PM (#13246178)

Because then your ability to stay private and secure is tied to the government?

If we're already talking about breaking the current TLS system, a DNS based security (Browsers include DNS keys, DNS hosts site keys) makes much more sense.

[ Parent | on HN ]