634
submitted 9 months ago by buh@lemmy.world to c/firefox@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] TiffyBelle@feddit.uk 96 points 9 months ago

All well and good, but sadly this relies on the hosts managing DNS to include specific entries in their DNS configuration for keys to use during the encryption process. Unfortunately the vast majority of hosts probably won't be bothered to do this, similar to DNSSEC.

[-] LastYearsPumpkin@feddit.ch 135 points 9 months ago

And HTTPS relies on hosts managing SSL certificates. Web services don't use them until it hits a critical mass, then it becomes weird and broken when you aren't using it.

This just needs some time to settle in.

[-] DarkThoughts@kbin.social 76 points 9 months ago

I remember when absolutely no one used https and then in a matter of a couple years things got really fast. Now you can easily browse with https required and only occasionally find the odd website that doesn't use it (mostly some internet relic). That was such a great transition when it happened though.

[-] FriendlyBeagleDog@lemmy.blahaj.zone 44 points 9 months ago* (last edited 9 months ago)

It felt like it happened practically overnight when Let's Encrypt released.

[-] Chobbes@lemmy.world 35 points 9 months ago

Let's Encrypt was a godsend. Getting a TLS certificate before sucked.

[-] kautau@lemmy.world 26 points 9 months ago

Yes. Thank these folks:

Mozilla employees Josh Aas and Eric Rescorla, together with Peter Eckersley at the Electronic Frontier Foundation and J. Alex Halderman at the University of Michigan. Internet Security Research Group, the company behind Let's Encrypt, was incorporated in May 2013.

They created the ACME standard, the open source community got on board, and soon enough everyone bought in, a massive step forward for Internet security and the benefit of open source.

[-] jazir5@lemmy.ml 13 points 9 months ago

So Firefox is basically the GOAT when it comes to internet security and privacy? They should team up with the signal guys.

[-] Rade0nfighter@lemmy.world 28 points 9 months ago

Google preferring https sites was the motivator I saw for client demands.

SEO scores feed into the PPC cost in AdWords so all of a sudden people were crying out for their sites to “have the padlock icon” because what’s 20 bucks for a cert when you’re spending thousands of dollars a month

[-] jazir5@lemmy.ml 11 points 9 months ago

And now it's free with stuff like Let's Encrypt.

load more comments (15 replies)
load more comments (22 replies)
this post was submitted on 03 Oct 2023
634 points (98.9% liked)

Firefox

16767 readers
19 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago
MODERATORS