The browser / certificate industry as a whole has ignored the issue of cert revocation because "it slows things down". That's the entire problem on the technical side, but there's a financial side most ignore. They want certs that aren't valid for as long, so if you follow that argument what they are moving to is certs that are only valid for a very short time like days or hours, so they don't need revocation. The fact that this forces out smaller players "who are too small to set up a nice automated system but who still should be using SSL" is not a BUG in this system, it's a FEATURE. Go look at who's voting for these shorter cert life certs, it's all the MAMAA or FAAMG groups. Let's Encrypt is a way to fight back and start enabling those smaller players to still work in the monopolized web browser space.

When you understand how Microsoft makes money suddenly all the crappy things that we don't like about Windows makes sense because they are financially driven to be that way. Save dialogue pushing OneDrive, Start menu and Explorer pushing focus on other services, Steep decline in quality control â" Get updates as soon as theyâ(TM)re available -- RISKY CLICK, Slashed internal testing and increased their âoetelemetryâ information gathering to move beta tests out to all of us, and drive who knows what else. Conclusion; I would love to see us divest Microsoft

They DO appear to do that if the problem is bad enough, but I'm still going to keep telling people to stop using things after they stop getting regular updates. https://www.neowin.net/news/ap... Android too, if that last security update is a ways back.

I'd welcome a home router that uses stock OpenWRT. That particular one also seems to be on amazon but not really getting traction. Asus name recognition seems to mean something here.

I also ran into this discussion via Tapestry. RSS is alive and well.

Attackers that got in via other means can use these devices to achieve persistence. Wiping malware off computers is one thing but scrubbing all your printers and cameras isn't generally something done by incident responders. You'd have to have good traffic analysis to catch this too.

Per my experience on several of these, it breaks during the big feature updates.

My org tried this workaround a while back on some computers that didn't meet Win 11 hardware requirements (7th gen intel CPU). They were fine until the next feature update (annual/6month?) rolls out, and then that fails. The entire argument for linux here is they aren't arbitrarily cutting off old hardware like microsoft is in a couple months. Personally I tried linux for my own use and was pretty darn close but ran into some hardware drivers that just weren't ready. Bad laptop selection on my part? I'm probably going to end up with a mac for personal use.

Absolutely. It's easy to see why services like Cloudflare are becoming popular. I just dabble in all this myself but it's an interesting problem.

Some would question the need for a publicly trusted cert for a private site, but I get the point, that's an easy solution.

I feel like the majority use HTTP-01 challenge because it's so easy. DNS-01 challenge requires a agent that is compatible in your infrastructure AND your DNS provider that narrows the field considerably, I already know of one in my infrastructure that isn't compatible. Google seems named here but I have to wonder how much Cloudflare pushed this one too...

Give us prior written notice of when you'd like to use your own computer, we'll try our best to get it ready by then... Seriously?

I applaud the sentiment but we don’t need more laws and government. Vote with your wallet. Complain directly.

Some users are so demoralized by bad IT they just click through insecure warnings all the time. Sad but I've seen it, bet you have too.

Zuck appears to be turning around and heading back the right way but man has he got a long way to go to convince me it's not just bowing to the current administration.