Re: https at ietf.org

[[e-mail] (Noel Chiappa)]

    > From: Tim Bray <[e-mail]>

    > Wikipedia is taking the position that it's nobody's business who's
    > reading about what .. For example, a gay teenager in Uganda can read
    > about potential health problems with greatly lessened fear of exposure
    > and torture.

Somehow I doubt that someone tapping their communication is the biggest of
their worries on that score. Having someone look at their screen over their
shoulder, or any one of a number of things like that, is realistically a
bigger danger.

Heck, having their computer infected with a virus that allows people to spy on
their activities on it is probably more likely to happen. Shall we get rid of
JaveScript and all other active Web content (the way most of these things get
in, these days) to help protect people's privacy?

Forcing everyone who uses Wikipedia (or the IETF web sites) to use HTTPS may
make people feel good, and/or serve as an expression of outrage at widespread
surveillance, but I'm not sure it's much more than that. (Sure, make HTTPS
available, but just be realistic about how much good it will do.)


    > From: Yoav Nir <[e-mail]>

    > Your IT department might take a dim view of the kinds of articles that
    > you read

At many companies, the IT department can monitor _everything_ their employees
do on company-supplied equipment - and it's totally legal for them to do so.

    > the government agency might think you either a threat or a good target
    > for blackmail if they know the kind of articles that you read.

And don't even get me started on all the ways large, powerful governments have
of prying into people's lives...

	Noel