Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure”
by mstaoru on Wednesday July 25, 2018 @05:14AM
(#17607894)
In China, many mainstream websites are still HTTP-only. 99% of government websites are HTTP, including the ones you input very sensitive information into. No wonder black data market for any kind of records including medical, surveillance, tax etc. here is so well developed and cheap. Somehow, SSL certificates for CDNs cost around US$2000/year. Proprietary DNS extensions on Baidu, Alibaba, and Tencent clouds like 30x redirects do not work with HTTPS at all.
[ Parent
| on HN ]
Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure”
by exikyut on Wednesday July 25, 2018 @06:12AM
(#17608128)
1. Besides making HTTPS non-mandatory, what else can businesses do to try and attain/maintain a viable presence if they think they have something to offer that may not be antagonistic to the Chinese government? Run on local servers? (By "viable presence", I mean the ability to reach a small level of success and not only be known by those who have figured out how to successfully consistently break through the GFW, or been deemed eligible for a waiver)
2. I'm beginning to see the HTTPS thing as some kind of strategic war move on the part of the US, possibly 5 eyes, possibly other countries. I don't see it making things simpler, only more complicated (one example I can give is https://news.ycombinator.com/item?id=17540111 - it's a lot harder for me to analyze Web traffic within my own LAN now, I have to set up a machine capable of breaking HTTPS, then secure it well enough I'm still confident to do my banking/etc).
Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure”
by windowsworkstoo on Wednesday July 25, 2018 @06:25AM
(#17608176)
Re: China, just get an ICP. Aliyun will help you. You will need a Chinese business entity and some form of in country hosting but it’s not onerous
Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure”
by PikachuEXE on Wednesday July 25, 2018 @05:25AM
(#17607954)
Which is why we need to enable HTTP for our China users (only)
Hates that
Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure”
by robin_reala on Wednesday July 25, 2018 @05:32AM
(#17607983)
Does Let’s Ecrypt not work in China?
Edit: was doing some reading and found this interesting post: https://vpnpick.com/chinas-wosign-ca-found-threaten-users-le...
Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure”
by mstaoru on Friday July 27, 2018 @09:15PM
(#17630875)
Let's Encrypt works in China, but not the best due to many older Android phones, Windows XP, and general love for IE (I can even see 7-8 sometimes) and QQ browser with also in less recent version does not support SNI.