Puppy Linux Discussion Forum

Hotdog · Joined: 29 Sep 2011 Posts: 113 Location: Georgia USA

In the wake of our governments continued spying on us, it makes sense to utilize whatever means we have to make secure connections whenever possible. It will not stop the spying but it does show that we citizens are not totally lame about the situation. To that end, when attempting to use https for our favourite forum, this is the response:

tlchost · Posted: Sun 08 Sep 2013, 23:13 Post subject: Why?

Why use https to access a public website that does no financial transactions?
Or are your public posts supposed to be secure?

Duh

Hotdog · Joined: 29 Sep 2011 Posts: 113 Location: Georgia USA

Duh,

Using HTTPS for all site features is an increasingly common practice nowadays and protects users (and sites) against a variety of Internet attacks. For instance, it defends against the ability of other people on a wifi network to spy on your use of the site or even take over your account. Credit card numbers aren't the only information that you may consider private or sensitive.

Sites like Google, Twitter, and Facebook now support HTTPS for non-financial information — for general privacy and security reasons. In fact, the Electronic Frontier Foundation encourages the use of a browser addon called HTTPS Everywhere, even making it available on their web site.

Like you, Duh, I used to consider HTTPS just for financial business. Now I am interested in making my communications as difficult as possible for anyone else, especially the government, to see. They may still get to my mundane and harmless ramblings but let them have to work for it.

tlchost · Posted: Tue 10 Sep 2013, 19:04 Post subject:

Barkin · Joined: 12 Aug 2011 Posts: 753

tlchost · Posted: Wed 11 Sep 2013, 06:29 Post subject: Re: Why?

I like the hat. Is it multi-platform, or Linux only?

Hotdog · Joined: 29 Sep 2011 Posts: 113 Location: Georgia USA

Tlchost,

My apology regarding your name. It looked like "Duh" was a signature to these senior eyes. My tinfoil hat is adjustable. Sometimes I lend it to friends who did not know they needed one.

Karl Godt · Joined: 20 Jun 2010 Posts: 4005 Location: Kiel,Germany

I get Invalid certificate message if the date in the BIOS resets to Anno -1970 BC because of drained battery on the MOBO .

HTH ?

Btw : Have the Kebap Paradox : http://uncyclopedia.wikia.com/wiki/Beer%27s_Law wpaaped in alu fooil .

Laughing

tlchost · Posted: Sat 14 Sep 2013, 19:15 Post subject:

8-bit · Joined: 03 Apr 2007 Posts: 3401 Location: Oregon

when so called secure protocols are being used, who knows if the NSA had a hand in their development and also had a back door installed as part of the code?
Other countries, substitute your government's security division for "NSA".

Also, remember that impatience plays in on a user's web browsing.
Say one installs NoScript in their browser.
But any time they cannot see some video or a page is missing some obvious content, they click on the option to "Temporarily allow this page."

Just what all are they allowing by clicking that option?

I also have visited sites that one would expect to have a valid certificate. And many do not.
One example was a third party site that provided health information to an insurer of a person or group.