Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror

Comment: Re:Excellent. (Score 1) 308

by kthreadd (#49594891) Attached to: Mozilla Begins To Move Towards HTTPS-Only Web

How many hosting providers can you name that will install arbitrary certificates and run HTTPS for you without additional charges? GoDaddy? (No) FatCow? (No) SiteGround? (No) HostGator? (No) BlueHost? (No) DreamHost? (No)

They will generally offer self-signed HTTPS for a backend interface (e.g. one without your domain name in it). All of them want you to pay a fee for the service of offering HTTPS on your own virtual domain (regardless of who signs your certificate).

I'm sure they will change their business model.

Comment: Re:Excellent. (Score 2) 308

by kthreadd (#49594877) Attached to: Mozilla Begins To Move Towards HTTPS-Only Web

Not the same thing, wildcard helps in cases where multiple subdomains are being served by one server with only a single ip address. Since Let's Encrypt is currenly discussing wildcards, and its not looking good for them to actually support them, this would require servers to have an ip address per domain. If a server has more than 2 domains it is server, its COMPLETELY unreasonable.

It's not necessary to have an IP address per cert anymore since every browser has support for SNI nowadays.

Comment: Re:Wait a minute... (Score 2) 308

by kthreadd (#49593557) Attached to: Mozilla Begins To Move Towards HTTPS-Only Web

If my website just serves up public data that I don't care about the government seeing, you're going to disable new features on it anyway? Seems a bit extreme.

TLS can actually be used without encryption, the data is transfered in clear but you still get the authentication; which is actually something you want even if the data itself isn't secret.

Comment: Re: KDBus - another systemd brick on the wall (Score 1) 231

by kthreadd (#49558721) Attached to: Linux 4.1 Bringing Many Changes, But No KDBUS
Most users will run the combination of kernel and systemd which their GNU/Linux distribution ships. If your application does not work with that kernel then why don't you run an older distribution until the problem has been fixed? At the least running a newer kernel should be your goto solution before downgrading to an unsupported version.

The greatest productive force is human selfishness. -- Robert Heinlein

Working...