31–40 of 202 posts
We need a government root CA more than a government TLD. Domain names aren't even the only thing we should attest.
This sounds like a decent idea until you realize that means one of two options: - A US Government controlled CA root preinstalled on computers. Privacy advocates would be in arms. - Constant untrusted CA warnings when trying to access any government site.
I think it's particularly interesting that the US use .gov and not .gov.us (as a Brit). I'm sure there are oversights on who can acquire an inherently international .gov domain, but for example here in the UK .gov.uk domains have a strict application process [0] managed by central government. It just seems to me that it would be more secure, and more reassuring to citizens and visitors that they are on the correct si…
Always found it arbitrary that .gov is only for use by the US.
Had another country had a primary role in inventing the internet, they would probably have it (or more likely, the US would be .gov.us and everyone else would be whatever they are today).
We need a government root CA more than a government TLD. Domain names aren't even the only thing we should attest.
This sounds like a decent idea until you realize that means one of two options: - A US Government controlled CA root preinstalled on computers. Privacy advocates would be in arms. - Constant untrusted CA warnings when trying to access any government site.
This is how dn42 does it: https://dn42.dev/services/Certificate-Authority.md
We need a government root CA more than a government TLD. Domain names aren't even the only thing we should attest.
It's unlikely for a scammer to get a gov domain.
Because it was possible, maybe better now!
I got an official email from New York State's Office Of The Comptroller with a link to osc.state.ny.us. It came from an email address @osc.ny.gov. I don't understand why they couldn't use an official TLD in the URL too.
We need a government root CA more than a government TLD. Domain names aren't even the only thing we should attest.
This sounds like a decent idea until you realize that means one of two options: - A US Government controlled CA root preinstalled on computers. Privacy advocates would be in arms. - Constant untrusted CA warnings when trying to access any government site.
I think it's particularly interesting that the US use .gov and not .gov.us (as a Brit). I'm sure there are oversights on who can acquire an inherently international .gov domain, but for example here in the UK .gov.uk domains have a strict application process [0] managed by central government. It just seems to me that it would be more secure, and more reassuring to citizens and visitors that they are on the correct si…
I get it, you invented the internet, but the special status you have over it is a little frustrating."
I bet America having +1 as our country code bothers you too :P
America numba 1! /S
I think it's particularly interesting that the US use .gov and not .gov.us (as a Brit). I'm sure there are oversights on who can acquire an inherently international .gov domain, but for example here in the UK .gov.uk domains have a strict application process [0] managed by central government. It just seems to me that it would be more secure, and more reassuring to citizens and visitors that they are on the correct si…
What if a dept lets theirs lapse and some squatter swoops in and takes it?
We'll start the bidding at $1B USD...