We need to replace both SSL/TLS AND the broken CA cert model
Here is a proposal: DNSSEC ensures DNS record integrity, so use it to publish domain-specific CA. If you need to connect to www.example.com, get example.com's CA from the DNS, and use it to validate www.example.com certificate.
multi-billion dollar international project led by the French. What could go wrong?
French managed many big industrial projects on their own. To name a few: Ariane, Concorde, nuclear reactors and nukes...
It has been a long time since the number of soldiers ceased to be the key factor.
And you should not fear conflicts between China, India and US: they are all nuclear powers, and this forces everyone to be reasonable
I hear you about guerrilla, but the solution is simple: just avoid them. No guerrilla has ever been threatening US territory, and all the guerrilla the US army encountered were during foreign operation that had nothing to do with preserving US territorial integrity.
Finance weight has become so important that it has be taught in school.
I cannot wait for other constraints to become so important that instead of managing them, society decide to train children to cope with them: find a cave to sleep, make fire, spare attacks from wild animals, manage a raid from rival tribe...
With the US amounting for 50% of army expenses worldwide, and NATO accounting for 80%, it is not obvious where the enemies are.
The USSR does not exist anymore. A much smaller army would protect US security as well as the current one.
The revolutions in Tunisia and Egypt taught us that when the government cuts Internet, people have to gather to exchange ideas, and that fuels the protests.
But I bet the situation in Venezuela is not comparable. The government is legitimate and won election that everyone recognized as fair. The only concern at that time was the opposition attitude, which was not obviously ready to accept the election outcome. Therefore I suspect the current protests are manipulated. Cut Internet access, and the manipulation becomes a bit harder.
If I am right, Internet restriction will not worsen the situation. If I am wrong, it will throw more and more people in the streets.
At mine, the test site at https://www.imperialviolet.org:1266/ does not even load. Firefox says:
Secure Connection Failed An error occurred during a connection to www.imperialviolet.org:1266. A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot. (Error code: sec_error_pkcs11_device_error)