News for hackers. Stuff that matters.

A comment on Life Is About to Get Harder for Websites Without HTTPS. Parent comment

Re:Life Is About to Get Harder for Websites Without HTTPS by wfunction on Wednesday July 12, 2017 @03:48AM (#14750849)
And why would I trust a company I work at to be able to sign certificates for every single website on the internet? Especially if I need to install that root certificate on a personal device?
[ Parent | on HN ]
Re:Life Is About to Get Harder for Websites Without HTTPS by revelation on Wednesday July 12, 2017 @05:45AM (#14751246)
Because you already trust chinese, russian and a bunch of unethical for profit companies to do that?
[ Parent | on HN ]
Re:Life Is About to Get Harder for Websites Without HTTPS by wfunction on Wednesday July 12, 2017 @05:51AM (#14751264)
As a matter of fact I don't. I'm keeping track of my root certs.
[ Parent | on HN ]
Re:Life Is About to Get Harder for Websites Without HTTPS by dspillett on Wednesday July 12, 2017 @06:30AM (#14751393)
If you need such a device to do your job, maybe ask them to provide one so you can keep work off your personal device anyway? I disconnected my phone and so forth from work email and other services some time ago, and I'm not going back!
[ Parent | on HN ]
Re:Life Is About to Get Harder for Websites Without HTTPS by icebraining on Wednesday July 12, 2017 @05:04AM (#14751096)
Why would you need to install it in a personal device? Just add an exception. It's still better than plain HTTP since you can check the fingerprint against your work PC, which already validated the cert.
[ Parent | on HN ]
Re:Life Is About to Get Harder for Websites Without HTTPS by wfunction on Wednesday July 12, 2017 @05:11AM (#14751123)
Add an exception for every single internal site? You know how annoying that gets?
[ Parent | on HN ]