Sorry, off-topic, but as a fan it really bugs me that graphic halfway down appears taken without attribution from Hyperbole and a Half. http://hyperboleandahalf.blogspot.com/
It's a popular image macro by now.
Should All Web Traffic Be Encrypted?
11–20 of 136 posts
Re: Should All Web Traffic Be Encrypted?
#12Sorry, off-topic, but as a fan it really bugs me that graphic halfway down appears taken without attribution from Hyperbole and a Half. http://hyperboleandahalf.blogspot.com/
You know it's become a huge internet meme right? http://www.google.com.au/search?q=x+all+the+things&oq=x+....
Re: Should All Web Traffic Be Encrypted?
#13> On our production frontend machines, SSL/TLS accounts for less than 1% of the CPU load, less than 10KB of memory per connection and less than 2% of network overhead. This is too good to be true.
I assure you that it's true. I haven't reprofiled in that much detail since but I suspect that the numbers look even better now. Partly because computers are faster and partly because of software improvements.
Re: Should All Web Traffic Be Encrypted?
#14"we need to" hey, what about you go ahead and do it yourself?
that's "simple"! you've to solve the certificate issues. Easy as pie. I'll be waiting.
Re: Should All Web Traffic Be Encrypted?
#15gmail security is really only good between gmail accounts and is definitely stored in plain text in the googlesphere use PGP if you need to guarantee email privacy.
> is definitely stored in plain text in the googlesphere have a source for that?
By definition, since Google can index email and mine it for keywords, they have access to the contents of it, which makes it isomorphic to plaintext.
Re: Should All Web Traffic Be Encrypted?
#16Funny that https://stackoverflow.com/ certificate is not valid.
To be fair, Jeff Atwood recently left Stack Exchange (amicably, of course):
http://www.codinghorror.com/blog/2012/02/farewell-stack-exch...
Re: Should All Web Traffic Be Encrypted?
#17Funny that https://stackoverflow.com/ certificate is not valid.
Funny that this was written after Jeff Atwood left Stack Exchange.
Re: Should All Web Traffic Be Encrypted?
#18It's too bad this refers to SSL. There are sometimes good reasons not to use SSL, but there is rarely a good reason to send emails that contain any business, financial or security information over plaintext. Anyone who gets mails that amount to more than "Hey what's up man" should provide you with a public key for mail crypto.
Also, it is very smart to use full-disk encryption and also encrypt sensitive info on that disk in a separate encrypted file (often preferably with something like TrueCrypt that allows plausible deniability via hidden volumes) if your computer is used for anything important.
Think of the extent of damage that would have hit HBGary or any of the many other companies that have found themselves in a similar quagmire if they had employed some of that computer security knowledge to encrypt mail and required digital signatures before doing anything important (hint: the answer is 0).
You may have a competitor hooked into your mail server for years before you know anything has happened, while you scratch your heads and wonder why they always beat you to the punch on new products and steal your big clients.
You may have a hostile government agency after you for completely innocuous things, like downloading public domain research article. In this case, lots of encryption is going to buy your lawyers lots of time even if the judge eventually orders you to decrypt all of it; hopefully the real goods are hidden somewhere where they won't find them (like in a TC hidden volume, perhaps "in the cloud" in an encrypted file on Tahoe-LAFS over I2P).
Re: Should All Web Traffic Be Encrypted?
#19Sorry, off-topic, but as a fan it really bugs me that graphic halfway down appears taken without attribution from Hyperbole and a Half. http://hyperboleandahalf.blogspot.com/
You know it's become a huge internet meme right? http://www.google.com.au/search?q=x+all+the+things&oq=x+... .
Missed that one. Too busy reading Hacker N -- I mean, writing code.
And the meme-ification only makes me feel slightly better about it. I mean, what's it cost Jeff to give a little credit?
Re: Should All Web Traffic Be Encrypted?
#20I use the EFF's Firefox addon called "HTTPS Everywhere". It has a list of websites that have HTTPS enabled, and whenever your browser is directed to the plain-HTTP version, it will go to the HTTPS version instead. https://www.eff.org/https-everywhere A useful (but tbh kinda annoying) companion addon is the HTTPS Finder. It checks to see if the website you're currently browsing also has an HTTPS version, and will add a rule to the HTTPS Everywhere addon. (It also has a "whitelist" of sites that this breaks.) https://addons.mozilla.org/en-US/firefox/addon/https-finder