On 12/29/18, Ethan Gardener <eeke...@fastmail.fm> wrote: > On Sat, Dec 29, 2018, at 3:58 AM, Lucio De Re wrote: >> Personally, I think HTTPS is overrated, or has just made itself >> overrated. > > I've heard from multiple sources that this kind of single-ended > authorization isn't worth much, but I'm not so sure. My current ISP > re-encrypts all data from imgur with their own certificate, which means I > know the connection is being interfered with. > I like to think that I'm as sharp a security specialist as I'm likely to encounter, despite living in a bit of a backwater.
My ISP (one of, thankfully) managed to arrange a certified X.509 certificate for a domain I have absolute control over. Since then, the web site has had its ups and down, last of which (I really can't raise enough anger to take them on) they won't let me install the certificate myself: it needs root privileges and they won't grant them to a user. Thing is, the web site has no need whatever for user security, we hold no private information, Lucio. PS: That was a bit O.T. But I bet I could run the site on a Plan 9 server...
