Insecure connection

FF gives you a warning when a website claiming to be using encryption
has a bad certificate or the encryption is below standard. This is on by
default; although you can switch it off.
I've tried the latest IE and Safari, and neither of those warn me.

I feel disposed to switch it off, but I'd appreciate others' comments
before I do.

I feel rather cynical about claimed encryption. I was recently on the
phone and I had to pay some money by card. The woman said "I'll just
switch to a secure line", and a second later "OK, what's the card
number?" I didn't hear any click or perceive any change. And the words
"spin", "fake news", "bull****", "criminal lying" went through my head.

Ed

On 12/30/2017 7:07 AM, Ed Cryer wrote:
FF gives you a warning when a website claiming to be using encryption
has a bad certificate or the encryption is below standard. This is on by
default; although you can switch it off.
I've tried the latest IE and Safari, and neither of those warn me.

I feel disposed to switch it off, but I'd appreciate others' comments
before I do.

I feel rather cynical about claimed encryption. I was recently on the
phone and I had to pay some money by card. The woman said "I'll just
switch to a secure line", and a second later "OK, what's the card
number?" I didn't hear any click or perceive any change. And the words
"spin", "fake news", "bull****", "criminal lying" went through my head.

Ed


The problem with warnings about unsecured Web sites is that many very
good sites are still not HTTPS. Among them are the news sites for the
Canadian Broadcasting Corporation and the Association for Computing
Machinery, the forecasting sites of the U.S. National Weather Service
and the U.S. National Hurricane Center, and the site for my own county's
sheriff's department.

--
David E. Ross
http://www.rossde.com/

President Trump: Please stop using Twitter. We need
to hear your voice and see you talking. We need to know
when your message is really your own and not your attorney's.

Wolf K wrote:
On 2017-12-30 10:07, Ed Cryer wrote:
FF gives you a warning when a website claiming to be using encryption
has a bad certificate or the encryption is below standard. This is on
by default; although you can switch it off.
I've tried the latest IE and Safari, and neither of those warn me.

I feel disposed to switch it off, but I'd appreciate others' comments
before I do.

I feel rather cynical about claimed encryption. I was recently on the
phone and I had to pay some money by card. The woman said "I'll just
switch to a secure line", and a second later "OK, what's the card
number?" I didn't hear any click or perceive any change. And the words
"spin", "fake news", "bull****", "criminal lying" went through my head.

Ed

She was probably on a computer.


She was using one of these, the Get Smart "Cone of Silence".

http://www.soundlazer.com/wp-content...f-silence2.png

*******

I just checked my VOIP phone, and this is what I found...

SRTP Mode: Disabled X === Doh!
Enabled but not forced
Enabled and forced

https://www.schneier.com/blog/archiv...ncryption.html

Paul

On 12/30/2017 03:56 PM, Paul wrote:

[snip]

She was using one of these, the Get Smart "Cone of Silence".

http://www.soundlazer.com/wp-content...f-silence2.png

It was invented by professor Cone.

[snip

--
Mark Lloyd
http://notstupid.us/

"Faith is to the human what sand is to the ostrich"