this post was submitted on 03 Oct 2023
634 points (98.9% liked)
Firefox
17910 readers
242 users here now
A place to discuss the news and latest developments on the open-source browser Firefox
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
All well and good, but sadly this relies on the hosts managing DNS to include specific entries in their DNS configuration for keys to use during the encryption process. Unfortunately the vast majority of hosts probably won't be bothered to do this, similar to DNSSEC.
And HTTPS relies on hosts managing SSL certificates. Web services don't use them until it hits a critical mass, then it becomes weird and broken when you aren't using it.
This just needs some time to settle in.
I remember when absolutely no one used https and then in a matter of a couple years things got really fast. Now you can easily browse with https required and only occasionally find the odd website that doesn't use it (mostly some internet relic). That was such a great transition when it happened though.
It felt like it happened practically overnight when Let's Encrypt released.
Let's Encrypt was a godsend. Getting a TLS certificate before sucked.
Yes. Thank these folks:
They created the ACME standard, the open source community got on board, and soon enough everyone bought in, a massive step forward for Internet security and the benefit of open source.
So Firefox is basically the GOAT when it comes to internet security and privacy? They should team up with the signal guys.