News for hackers. Stuff that matters.

A comment on Chromium and Mozilla to enforce 1 year validity for TLS certificates. Parent comment

Re:Chromium and Mozilla to enforce 1 year validity for TLS c... by yjftsjthsd-h on Sunday June 28, 2020 @01:56PM (#23670648)
We have had this conversation to death: https://doesmysiteneedhttps.com/
[ Parent | on HN ]
Re:Chromium and Mozilla to enforce 1 year validity for TLS c... by at_a_remove on Sunday June 28, 2020 @04:38PM (#23671853)
I find some of the arguments on that page, uh ... unhelpful at best. Circular, even.
[ Parent | on HN ]
Re:Chromium and Mozilla to enforce 1 year validity for TLS c... by yjftsjthsd-h on Sunday June 28, 2020 @06:11PM (#23672490)
I guess I could see that for a small subset of the arguments presented, but that leaves all the rest. Honestly, "There's nothing sensitive on my site anyway." covers 90% of arguments I've seen against HTTPS and that answer is strong. The presence of weak arguments doesn't undermine the strong arguments.
[ Parent | on HN ]