[Freedombox-discuss] Identity UI

Michael Rogers michael at briarproject.org
Sun Jun 24 23:26:13 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 24/06/12 23:22, Daniel Kahn Gillmor wrote:
>> 4) When you contact your freedombox from outside your home, you
>> want to do so over https. This means the freedombox needs to come
>> with an SSL certificate that's supported (without ugly warnings)
>> by all major browsers, correct?
> 
> I'm not convinced this is possible, given the naming constraints
> and vulnerabilities imposed by the dominant CA cartel.  Are we
> willing to encourage/support the use of a plugin or extension for
> some of the major browsers?  That might be one way to address some
> of these warnings.

Just wanted to point out that using a Tor hidden service would also
help with this issue - you'd get end-to-end encryption and
authentication with no certificate warnings.

Cheers,
Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJP56IVAAoJEBEET9GfxSfMH9kH+wTqb23krppjM6+lFSN3HU3l
nPD2Q0BR2QUs/i8v6+ZPyFECNQUJunYHq54hu38zcPmou36VHkW619AzSEbkk50x
x2wvCUSOuP5mEmlR0/+X9fppSZhiSoE7wndx2Mm4EK6b1iuYTs8Pu0j6XeUVFBg0
ASf8y6G8Ot8HQ0O+wJJglqAIpKjG+NIeGNA3QqwNPumBauUzxoUg8Zwx6Pmd1oIy
YMNDXIAU7l5Yfd97hUsn63rmyt/I0TIRGYrSQtxYWLWmgfLT8I7QJjNlHZLTc+Gh
WcKX0xLsrn5XJAvLd5Ow8L6nC40nRuroXpyJ/cQZOhZqiUeMhLow3EMk9vgsu+s=
=Tty1
-----END PGP SIGNATURE-----



More information about the Freedombox-discuss mailing list