News for hackers. Stuff that matters.

A comment on Universal SSL. Parent comment

Re:Universal SSL by scintill76 on Monday September 29, 2014 @07:58AM (#8382486)
The centralization argument still has merit. If this catches on big time, there's only one company to coerce/compromise, to backdoor a bunch of services at once.

Arguably the CA/ISP structure is like this already, but this may be worse.

[ Parent | on HN ]
Re:Universal SSL by MCRed on Monday September 29, 2014 @10:20AM (#8382920)
Totally true, but on the other hand, the first mile will be encrypted for a lot more connections:

"Yesterday, there were about 2 million sites active on the Internet that supported encrypted connections. By the end of the day today, we'll have doubled that."

That's kind of spectacular.

I think the first mile is one of the key places where data gets stolen. OF course the final millimeters-on the server- is another.

[ Parent | on HN ]
Re:Universal SSL by sarciszewski on Monday September 29, 2014 @10:49AM (#8383085)
Yes, but this (free SSL everywhere) can (and should!) become the bandwagon that all other service/hosting providers and CAs should adopt.
[ Parent | on HN ]
Re:Universal SSL by cbg0 on Monday September 29, 2014 @08:28AM (#8382576)
Hasn't this been the case with people using SSL on Amazon's ELB?
[ Parent | on HN ]
Re:Universal SSL by DrJosiah on Monday September 29, 2014 @02:49PM (#8384476)
Yes, Amazon's ELB has always been a potential attack target for people who want to get to unencrypted data.
[ Parent | on HN ]