Re:Firefox 83 introduces HTTPS-Only Mode
by CamperBob2 on Tuesday November 17, 2020 @10:29PM
(#25132882)
The web is now a multi billion trillion dollar industry.
Maybe your web service is, but mine isn't. Mine is a specialized embedded device server that now has an expiration date for no reason on God's green earth.
Re:Firefox 83 introduces HTTPS-Only Mode
by hsbauauvhabzb on Tuesday November 17, 2020 @11:59PM
(#25133379)
Feel free to fork Mozilla codebases if you disagree with fundamental security concepts.
And? App developers should opt in to ignoring transport security. I’m sure a bunch of Android shitware attempts to install CAs either via user interaction or exploitation.
> Once we go down this path there's no turning back to the user-centric Web of the 1990s / 2000s
The landscape we live in now is very different to then. I’m all for a free web, but not at the cost of security. The web is now a multi billion trillion dollar industry. Weakening security just so Bob can see Alices’ holiday pics in situation where Alice can’t figure out letsencrypt, is frankly unhinged.
If you want a ‘free web’ you’re welcome to disable any HTTPS enforcement and disable TLS cert checking entirely. Hell, fork a browser, be very clear about the security weaknesses and publish on github if you feel that strongly, I’ll even star it for you.