Stories
Slash Boxes
Comments

SoylentNews is people

posted by CoolHand on Wednesday April 15 2015, @04:52AM   Printer-friendly
from the it's-the-end-of-the-web-as-we-know-it-and-i-feel-fine dept.

Phoronix reports the Mozilla Security Engineering team is planning to make their browser useless for browsing much of the World Wide Web, by deprecating insecure HTTP.

Richard Barnes of Mozilla writes:

In order to encourage web developers to move from HTTP to HTTPS, I would like to propose establishing a deprecation plan for HTTP without security. Broadly speaking, this plan would entail limiting new features to secure contexts, followed by gradually removing legacy features from insecure contexts. Having an overall program for HTTP deprecation makes a clear statement to the web community that the time for plaintext is over -- it tells the world that the new web uses HTTPS, so if you want to use new things, you need to provide security.

See also this document outlining the initial plans.

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 4, Touché) by darkfeline on Wednesday April 15 2015, @02:45PM

    by darkfeline (1030) on Wednesday April 15 2015, @02:45PM (#170976) Homepage

    It's is for your own good, idiot. Invalid cert means someone is MITMing your connection to Gmail, meaning they can steal your Gmail password, meaning that they have full access to every single site you have registered using that email account, which may mean that your bank account would now be going for $10 on the black market. It's a premium price because its owner is stupid and less likely to notice someone draining it dry.

    --
    Join the SDF Public Access UNIX System today!
    Starting Score:    1  point
    Moderation   +2  
       Flamebait=1, Informative=1, Touché=2, Total=4
    Extra 'Touché' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   4  
  • (Score: 0) by Anonymous Coward on Thursday April 16 2015, @05:18PM

    by Anonymous Coward on Thursday April 16 2015, @05:18PM (#171658)

    And the providers of Free WiFi do MITM you if you want the free WiFi. But they aren't stealing your password.
    But we knew that already and were willing to accept the risk. But the program won't let us.
    And we knew all that already.

    IDIOT.

    When someone acts for "my own good," then wouldn't it be lovely if they actually checked with me to make sure their definition and mine coexist? And, if I want to use a burner email account, let me?

    • (Score: 2) by darkfeline on Thursday April 16 2015, @09:07PM

      by darkfeline (1030) on Thursday April 16 2015, @09:07PM (#171729) Homepage

      >And the providers of Free WiFi do MITM you if you want the free WiFi. But they aren't stealing your password.
      Are you sure that the providers of your free WiFi really aren't stealing your password? Are you even sure that it is the WiFi providers that are MITMing you and not one of your fellow cafe-goers?

      --
      Join the SDF Public Access UNIX System today!