Ambassador Mozilla stellt CRLite für Firefox vor
https://linuxnews.de/mozilla-stellt-crlite-fuer-firefox-vor/ #mozilla #firefox #https
LinuxNews.de · Mozilla stellt CRLite für Firefox vor
More from 
LinuxNews.de
Administered by:
#https
4 posts4 participants1 post today
Replied in thread
If you want to #paywall it you could put it behibg #HTTPS & add authentification.
If you want #donations then it's easy to just add those links to anything in the content...
Continued thread
Long thread/6
Continued thread
Long thread/4
As I am browsing through the settings in firefox I see the odd setting of using it's own DNS over https enabled. My settings should be copied over from the account I use and I know that I've **never** turned this setting on.
I'm now on the SBC Pi5 running MX Linux Pi respin.
My own dns config is perfectly fine and Im changing it back.
Why is the firefox team doing this? IS there any protective benifit from having this setting on?
Let’s Encrypt hat OCSP-Server abgeschaltet
Zertifikate kann man bei Let’s Encrypt nicht mehr per OCSP prüfen. Wer von Problemen erfahren will, muss stattdessen Widerrufslisten konsultieren.
heise online · Let’s Encrypt hat OCSP-Server abgeschaltet
»HTTP/1.1 Must Die – It's time to acknowledge HTTP/1.1 is insecure«
Admittedly, I know pers. not how seriously you have to take this but I am only developing web servers set to HTTP/2.0, because HTTP/3 is not yet extensively supported.
http1mustdie.comHTTP/1.1 Must DieUpstream HTTP/1.1 is inherently insecure, and routinely exposes millions of websites to hostile takeover. Join the mission to kill HTTP/1.1 now
Can’t connect to public WiFi via Linux
I am using Fedora 42, and I am unable to access the captive portal of inOui TGV. I can connect to the WiFi with no problems, but I can’t get access to the Internet.
I have tried everything:
- Connecting to
192.168.1.1, tohttp://neverssl.com, tohttp://wifi.sncfvia browser - Running
sudo dhclient -rand rebooting the device - Running
systemctl restart NetworkManager - Also other stuff I tried in the past with other public WiFis. I am sure there is something wrong with my specific device configuration, it’s not this network.
Nothing works 
Can somebody who understands this stuff help me?
Replied in thread
@jwildeboer : modern certificates are used for authentication only, not for secure connections.
OTOH, if you have no certainty that your software is communicating with the server you intended, a secure connection to it is pointless - but the connection remains secure.
Using TLS v1.3, the connection is even secured before the server is authenticated (if, after encrypting the connection, the authentication of the server fails, then the client should at least warn the user - if not immediately disconnect).
Yes, I know, these are boring details, but they are misunderstood way too often by people who SHOULD know how this works (I know you do, but please don't simplify things too much).
Zertifikatswarnung umgehen
Ich experimentiere viel mit HTTPS und sehe viele Warnungen zu ungültigen Zertifikaten. Wie kann ich Seiten aufrufen, wenn sie HSTS verwenden?
c't MagazinZertifikatswarnung umgehenIch experimentiere viel mit HTTPS und sehe viele Warnungen zu ungültigen Zertifikaten. Wie kann ich Seiten aufrufen, wenn sie HSTS verwenden?
Mexican-American comedian Diego Luna ended his week as guest host on “#JimmyKimmel Live” with a reminder that #American tax-payers spent $15 billion for a mostly non-existent #BorderWall between #Mexico and the #UnitedStates with built portions that have either been blown down by high winds or can be scaled with a makeshift ladder
! #https://www.huffpost.com/entry/diego-luna-trump-border-wall_n_685e215ce4b0bb504500091e
#Resist hilariously!
Introducing Web Numbers
Domains? Where we’re going, we don’t need domains!
Get ready for an exciting new (old?) way to address (small) web sites in 2026.
https://ar.al/2025/06/25/web-numbers/
(Thanks to @letsencrypt.)
Aral Balkan · Web NumbersDomains? Where we’re going, we don’t need domains! Until the end of this year, the only way to have a secure web site is to have it accessible via a domain name. That, however, is changing. And the design of the Small Web will be changing along with it. IP addresses are about to make a comeback on the web in a big (ok, small) way, thanks to upcoming support for security certificates for IP addresses by Let’s Encrypt.
#woke https://https-vd.ch/2025/06/15/le-logiciel-talon-dachille-du-numerique-responsable-vaudois/
Découvrez le site du #HTTPS, le nouveau nom du #PartiPirateVaudois, obligé de rompre complètement les amarres avec le #PartiPirateSuisse, y compris en abandonnant la notion de #PartiPirate, pour ne pas être traîné dans ses dérives, et profitez-en pour lire l'analyse de @sebseb01 sur le #numérique #responsable à l' @etatdevaud et l'angle mort concernant le #libre et l' #opensource.
https-vd.chLe logiciel, talon d’Achille du numérique « responsable » vaudois – HTTPS
More from 
Sébastien Piguet
https://www.alojapan.com/1290666/the-tmg-is-accepting-applications-for-subsidies-to-attract-green-transformation-gx-related-foreign-companies/ The TMG is accepting applications for subsidies to attract Green Transformation (‘GX’) related foreign companies #Https://www.investtokyo.metro.tokyo.lg.jp/en/oursupports/gxSubsidy.html #https://www.investtokyo.metro.tokyo.lg.jp/en/oursupports/index.html #news #Tokyo #TokyoNews #東京 #東京都 TOKYO, JAPAN, June 4, 2025 /EINPresswire.com/ — In order to realize a decarbonized society and promote a “sustainable recovery,” the Tokyo Metropo…
Continued thread
Leverage built-in authentication with 
Store passwords securely using 
Secure environment variables and force 
Goodbye Site.js, Hello Kitten!
I started working on creating a Small Web¹ server (a peer-to-peer Web server) six years ago² with Site.js.
Building Site.js was my first attempt. And it resulted in:
• Auto Encrypt (automatic Let’s Encrypt certificates): https://codeberg.org/small-tech/auto-encrypt
• Auto Encrypt Localhost (automatic localhost TLS certificates): https://codeberg.org/small-tech/auto-encrypt-localhost
• @small-tech/https (drop-in Node.js https module replacement with automatic TLS certs everywhere): https://codeberg.org/small-tech/https
• JSDB: In-process, in-memory JavaScript database that persists to append-only JavaScript logs: https://codeberg.org/small-tech/jsdb
As Site.js reached an evolutionary dead-end, and as I learned from my experiements with replicated data types that replicated data types are *not* a prerequisite for a decentralised web (actual topological decentralisation and ease of use are), I started writing a new server/platform called Kitten from scratch while still making use of the tried and tested modules listed above.
Last week, I switched over our last site using Site.js to Kitten and, with that, today I’ve sunset³ Site.js:
For its successor, please see Kitten:
If you want to support our work at the Small Technology Foundation, please consider becoming a patron:
https://small-tech.org/fund-us
¹ https://ar.al/2024/06/24/small-web-computer-science-colloquium-at-university-of-groningen/
² https://ar.al/2019/08/26/introducing-small-technology-foundation/
³ Using our instance of Look Over There!: https://look-over-there.small-web.org
Replied in thread
@GossiTheDog @signalapp it merely prevents #Screenshots by claiming it's #DRM'd content.
It's a mere ask and #Microsoft could specifically close that #API and make it subject to contractual agreements (as they did with their #Antivirus API calls to disable #WindowsDefender!) if they decide this is against their wishes.
It also doesn't prevent the #Keylogger nor works against the known #CryptoAPI #backdoor affecting all #Browsers (except #Firefox and @torproject / #TorBrowser) which can be triggered by a single #HTTPS request.
The correct solution for #Signal would be to alert all their users and specifically block #Windows in general or at least #Windows11 simply because it is a #Govware and empirically cannot be made private or secure.
But that would require them to actually give a shit, which thed don't, cuz otherwise they would've stopped demanding #PII like a #PhoneNumber and moved out of juristiction of #CloudAct.
- I mean, what's gonna prevent the #Trump-Regime from threatening @Mer__edith et. al. with lifetime in jail for not kicking the #ICC (or anyone else he and his fans dislike) from #Signal's infrastructure?
Since they are highly centralized.they certainly are capable to comply with "#Sanctions" (or whatever bs he'll claim!)...
GitHubGitHub - kkarhan/windows-ca-backdoor-fix: Fixes a critical backdoor in Windows' CryptoAPI, which allows to unconsenting Update of CA Certificates in the background. See https://www.heise.de/ct/ausgabe/2013-17-Zweifelhafte-Updates-gefaehrden-SSL-Verschluesselung-2317589.htmlFixes a critical backdoor in Windows' CryptoAPI, which allows to unconsenting Update of CA Certificates in the background. See https://www.heise.de/ct/ausgabe/2013-17-Zweifelhafte-Updates-gefae...
Il y a des experts en cryptograhie ici ?
Un certificat avec des SANs mais sans Common Name / Subject ; c'est possible ?
https://crt.sh/?id=18519921301
#tls #pki #https
crt.shcrt.sh | 18519921301Free CT Log Certificate Search Tool from Sectigo (formerly Comodo CA)
https://www.europesays.com/fr/85823/ Le président du Panama ne renégociera pas l’accord de sécurité avec les États-Unis #Actualités #EtatsUnis #ÉtatsUnisD'Amérique #https://lactualite.com/sujet/international/ #News #UnitedStates #UnitedStatesOfAmerica #US #USA
Replied in thread
