Post #1787319

"To make the core of my disgust reaction perfectly clear here, only the following things about TLS offend me: • You must submit to the Certificate Authority, even if you don’t care and your users don’t care • The browser acts like if you didn’t do this, it’s somehow “dangerous” • These two effects in tandem can get worse at any time, and have done so The situation is annoying in principle because of the un-democratization of the web, and annoying in practice because I gotta do all these damn chores for dubious benefit (I am NOT a bank). Passive mass surveillance is a real thing, but this can be defeated with tinkerer-friendly approaches like point-to-point encryption (trust on first use). SSH is great."