cultural reviewer and dabbler in stylistic premonitions

  • 1.19K Posts
  • 1.63K Comments
Joined 4 years ago
cake
Cake day: January 17th, 2022

help-circle






  • Arthur Besse@lemmy.mltoPrivacy@lemmy.ml"Trusted" eMail Providers?
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    2 days ago

    every email provider lets you “keep your own private key” as long as you do encryption using the interoperable OpenPGP standard with software running on your own computer. many email providers will recommend that you do this and will even instruct you about how to (eg, the more reputable options in this thread such as migadu, mailbox.org, posteo, and even fastmail all have instructions for how to use some implementation of pgp to encrypt your email).

    meanwhile any company selling non-standard “email encryption” (eg, proton and tuta) which is not pgp-compatible (or in the corporate world, s/mime is also a standard…) is in the snake oil business and should be boycotted regardless of which shitty youtubers they’re sponsoring this week.





























  • I don’t follow how a useful thing becomes “useless” or “no point” just because millions of people are unjustly denied access to it.

    Fwiw Let’s Encrypt was just the first but isn’t actually the only free ACME provider anymore; acme.sh has a list of other providers in its readme and there is another list here. Actalis is Italian apparently; unfortunately I think the rest might be ultimately US-based (ZeroSSL says it’s Austrian but it’s owned by a US company).

    It would be nice if some more independent country (eg, China) who already has one or more CAs trusted by all major browsers would step up and start offering free certs to the world.

    It’s worth noting that HTTPS is needed not only for its confidentiality and authenticity properties, but also is required by browsers for pages to be allowed to use modern features like WebRTC (needed to have a voice or video call from a web page).






  • Companies now block older browser versions

    Now? This has been happening since the dawn of the web. At least the screenshot you pasted represents all of the big three rendering engines - it used to be common to see “Internet Explorer version XYZ required”, sometimes with javascript to prevent you from using the site with any other browser (even if in some cases it would actually work fine if you simply spoofed your user agent string).

    I have used kinda retro devices to surf the web at times

    Most websites became HTTPS-only sometime after the snowden disclosures in 2013.

    Over time old versions of TLS have been deprecated and eventually support for them is dropped from browsers and web servers alike. So, a browser from even 15 years ago literally cannot connect to most webservers today.

    Planned obsolescence is terrible but it’s a minor factor here: it’s actually dangerous to use even (especially?) a slightly-out-of-date web browser because every new release fixes vulnerabilities which can be exploited to run malicious code on your computer. The planned obsolescence which prevents people from being able to have an up-to-date browser comes mostly from proprietary operating system vendors; to have up-to-date software while continuing to use somewhat older computers you need to use free/libre software.