News for hackers. Stuff that matters.

A comment on SELinux is unmanageable; just turn it off if it gets in your way. Parent comment

Re:SELinux is unmanageable; just turn it off if it gets in y... by Hikikomori on Wednesday April 27, 2022 @03:54AM (#31177445)
>Sounds like an ISP problem. Buy service from a better one. No need to impose SSL on the website for this.

Just move I guess.

[ Parent | on HN ]
Re:SELinux is unmanageable; just turn it off if it gets in y... by perryizgr8 on Wednesday April 27, 2022 @07:41AM (#31178686)
Or don't. It's not a problem that needs to be solved server-side.
[ Parent | on HN ]
Re:SELinux is unmanageable; just turn it off if it gets in y... by josephg on Thursday April 28, 2022 @12:11AM (#31188643)
It is a problem to solve over the wire, because we should assume at this point that bytes over the internet are monitored. Both in the east (Great Firewall of China) and the west (NSA + Snowden). I don't want my ISP or my government knowing which websites I'm visiting, what apps I open on my phone or, really anything else about me without a court order. Insecure-by-default is a bad default.

To protect users, traffic over the internet should always be encrypted. Even if you don't care, as a user I care. And thankfully the people in charge of our software, protocols and ecosystem are slowly forcing the issue on our behalf:

- Unencrypted http will eventually be deprecated from web browsers. (Newer browser features are already banned in insecure contexts).

- iOS forbids applications from making unencrypted HTTP connections.

- The IETF more or less requires new protocols to be secure.

We'll see more of this over time. Its a good thing. Get on board.

[ Parent | on HN ]