Re: [perpass] perens-perpass-appropriate-response-01

[Bruce Perens <[e-mail]>]

On 12/04/2013 03:27 PM, Ted Lemon wrote:

As to the question of encryption generally, nobody questions (I hope) that we want our transactions with banks to be secure.

And this is a solved problem except for the fact that they tend to get unencrypted laptops stolen with our data. Which we can't solve for them.

I think it's generally accepted that what videos we watch is private (there's a federal law in the U.S. making it illegal for video stores to give out that information).

They are private, and encrypted, but the encryption doesn't protect us. It only "protects" the video provider who believes that the whole internet will run away with their content if we are not forcibly restrained. If it works at all.

 They make it too easy for _anybody_ to eavesdrop, and to use the information they acquire whilst eavesdropping in really nefarious ways (e.g. the watering hole attack someone referred to recently).

So, build browsers that request https preferentially. Publish that as a recommendation. But please don't lock everyone into your solution.

    Thanks

    Bruce