Re:Chromium Root Store Update, Moving Forward, Together
by rektide on Tuesday March 07, 2023 @06:50PM
(#35063136)
I get the desire here, but it feels like there's so many scary reprecussions to limiting cert lifetimes so much. Someone's out using an offline-capable map app on an tablet, then 2 months latter it breaks.
There's WebBundles which allow for interesting sharing. But it turns out there's some random cybersecurity document saying DNS data should never be cached for more than 7 days. So you can share a website with someone for n days, and they'll be able to use it for 7 - n days.
None of these high security minded folk ever think even for a second about putting in escape hatches for the potentially affected users. We shouldn't make forcing the world to be always-connected like we are. But that's what these security trends have turned into.
There's WebBundles which allow for interesting sharing. But it turns out there's some random cybersecurity document saying DNS data should never be cached for more than 7 days. So you can share a website with someone for n days, and they'll be able to use it for 7 - n days.
None of these high security minded folk ever think even for a second about putting in escape hatches for the potentially affected users. We shouldn't make forcing the world to be always-connected like we are. But that's what these security trends have turned into.