Viewing profile — andyjh

Licensing issues aside, it would cost _additional_ money to actually serve all that content to a global audience (shipping bytes over the internet isn't free).

My first thought was that it's more likely something like this than a bad actor on their wifi: https://en.wikipedia.org/wiki/Hola_%28VPN%29 Anyone with that browser extension insta…

It would also be useful if you can tell us which IP you're connecting to when you see the error (eg from dev tools).

One might reasonably assume the "bad guys" they're trying to catch would go elsewhere though, if they have any sense. So then you're just left with innocent people to spy on.

Milton Keynes has had electric buses since 2014, which top up their batteries via induction chargers at the end of each route throughout the day: https://www.bbc.co.uk/news/technol…

Chrome isn't forcing anyone, it's just making it clear to users that a non-https site is insecure, which it is. What's the problem with providing information so that users can make…

Why can't you just sign up via tor?

Not true: Currently the "info" indicator appears on first interaction (which _could_ be after they've auto-completed everything, but may not be). This is changing though: In Chrome…

No, as of chrome 68, http will be marked as not secure without waiting for any user interaction at all. The change for http pages outlined in this post is to upgrade that from the …

Actually the target position is that https _won't_ be marked as "secure", but rather than http will be marked as "not secure". Can't really argue with that.

It's not really any business of the ISPs which services their customers want to use. If demand for bandwidth increases such that the price isn't viable anymore, charge customers mo…

I'm personally glad Mozilla take such an interest in ensuring CAs are trustworthy. After all, they are the linchpin for security and authenticity of just about everything on the we…

No proxy support, so I can't use it in my corporate environment. https://github.com/WhisperSystems/Signal-Desktop/issues/1632 Also a bit annoying that it can't be run in the backgr…

You can use client certificates in h2, you just can't do TLS renegotiation. So you have to request a client cert in the initial handshake; you can't ask later (eg for a specific UR…

"...the leaked information is from any website which was using the service..." Potentially, yes. Not just HTTPS, but those are obviously the more worrying cases. It's not possible …