Updates tagged with https on Rainbow Dash Network!
sl: #HTTPS #only #mode #support in #Firefox finally. This should have been obvious for years. Great option, just got rid of HTTPS #Everywhere #extension #plugin #addon.https://blog.mozilla.org/security/2020/11/17/firefox-83-introduces-https-only-mode/
sl's status on Wednesday, 18-Nov-20 18:16:09 UTC
#HTTPS #only #mode #support in #Firefox finally. This should have been obvious for years. Great option, just got rid of HTTPS #Everywhere #extension #plugin #addon. https://blog.mozilla.org/security/2020/11/17/firefox-83-introduces-https-only-mode/
sl: Good #reading: https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-svcb-https-00 Service binding and parameter specification via the DNS (#DNS #SVCB and #HTTPS RRs) draft-ietf-dnsop-svcb-https-00 #ietf
sl's status on Sunday, 04-Oct-20 06:11:04 UTC
Good #reading: https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-svcb-https-00 Service binding and parameter specification via the DNS (#DNS #SVCB and #HTTPS RRs) draft-ietf-dnsop-svcb-https-00 #ietf
rozzin: I do get dubious when I see "Today, in a world where data security is paramount we are offering you…" on a web page served without #HTTPS.
rozzin's status on Tuesday, 19-Jun-18 16:49:08 UTC
I do get dubious when I see "Today, in a world where data security is paramount we are offering you…" on a web page served without #HTTPS.
markov: https://mstdn.io/users/lurak #https://pleroma.iro-iro.xyz/tag/whisky
markov's status on Friday, 04-May-18 03:40:12 UTC
https://mstdn.io/users/lurak #https://pleroma.iro-iro.xyz/tag/whisky
markov: https://bsd.network/users/phesslerphessler https://cybre.space/users/viciousviscosityviciousviscosity FFFF FFFF FFFF FFFC #https://social.hacktivis.me/tag/ipv7
markov's status on Wednesday, 02-May-18 20:10:11 UTC
https://bsd.network/users/phesslerphessler https://cybre.space/users/viciousviscosityviciousviscosity FFFF FFFF FFFF FFFC #https://social.hacktivis.me/tag/ipv7
markov: #https://pleroma.iro-iro.xyz/tag/cuteposting
markov's status on Tuesday, 01-May-18 07:10:10 UTC
#https://pleroma.iro-iro.xyz/tag/cuteposting
markov's status on Friday, 27-Apr-18 14:55:10 UTC
markov's status on Thursday, 26-Apr-18 07:40:14 UTC
strypey: @budkin here's someone who knows their Potato Knishes writing about #HTTPS https://blog.codinghorror.com/lets-encrypt-everything/
strypey's status on Monday, 16-Apr-18 12:39:00 UTC
@budkin here's someone who knows their banana writing about #HTTPS https://blog.codinghorror.com/lets-encrypt-everything/
strypey: What's up @digits@torontomusic.cloud saw your #Medium "anti-capitalist social network" post. BTW Your instance has some #HTTPS issues
strypey's status on Saturday, 07-Apr-18 16:08:33 UTC
What's up @digits@torontomusic.cloud saw your #Medium "anti-capitalist social network" post. BTW Your instance has some #HTTPS issues
markov: #https://gerzilla.de/search?tag=openstreetmap
markov's status on Monday, 12-Mar-18 05:40:13 UTC
#https://gerzilla.de/search?tag=openstreetmap
therealpennyfortheguy: HELP urgently needed. If you live in, or around London, and you can provide some of the below items, please contact Streets Kitchen here >>> https://twitter.com/streetskitchen?lang=en or here >>> #https://www.facebook.com/StreetsKitchenOfficial/ Also .. If you have a van, and a driver that you can volunteer for a few days. You would be literally saving lives. Be The Change You Want To See Thank You The #StreetKitchen volunteers are doing an incredible job. Streets Kitchen @streetskitchen 4hours ago Do you happen to have some of the following, lying around, going unused? + Men's underwear (new) + Sleeping bags + Floor mats (for sleeping on) + Planks/scaffolding boards (shelves) + Hugs (for Gary, who's barely slept in the 4 days he's been volunteering while staying with us)
therealpennyfortheguy's status on Wednesday, 07-Mar-18 01:55:30 UTC
HELP urgently needed. If you live in, or around London, and you can provide some of the below items, please contact Streets Kitchen here >>> https://twitter.com/streetskitchen?lang=en or here >>> #https://www.facebook.com/StreetsKitchenOfficial/ Also .. If you have a van, and a driver that you can volunteer for a few days. You would be literally saving lives. Be The Change You Want To See Thank You The #StreetKitchen volunteers are doing an incredible job. Streets Kitchen @streetskitchen 4hours ago Do you happen to have some of the following, lying around, going unused? + Men's underwear (new) + Sleeping bags + Floor mats (for sleeping on) + Planks/scaffolding boards (shelves) + Hugs (for Gary, who's barely slept in the 4 days he's been volunteering while staying with us)
kuro: Gar nicht so sicher: Immer mehr #Phishing- Webseiten setzen auf #HTTPS https://is.gd/hVFBhE !security HTTPS richtig einschätzen
kuro's status on Friday, 08-Dec-17 09:30:07 UTC
Gar nicht so sicher: Immer mehr #Phishing- Webseiten setzen auf #HTTPS https://is.gd/hVFBhE !security HTTPS richtig einschätzen
markov: dildrones sound like something that needs a fully staffed control tower to manage consent. without flight plans, licenses, radios, GPS, and insurance, the dildrones stay in the hangar or get #https://sealion.club/tag/turnedoff by the air force. #https://sealion.club/tag/safeskies #https://sealion.club/tag/futuristicjobs #https://sealion.club/tag/dystopia
markov's status on Wednesday, 15-Nov-17 09:25:10 UTC
dildrones sound like something that needs a fully staffed control tower to manage consent. without flight plans, licenses, radios, GPS, and insurance, the dildrones stay in the hangar or get #https://sealion.club/tag/turnedoff by the air force. #https://sealion.club/tag/safeskies #https://sealion.club/tag/futuristicjobs #https://sealion.club/tag/dystopia
rozzin: Intriguing: on the #BostonExpress, using the bus Wi-Fi, getting selectively #MITM'd. Connections to https://riseup.net are hijacked by something claiming to be a `Cisco Umbrella', while #HTTPS to other hosts seems to go unmolested: https://status.hackerposse.com/attachment/16361
rozzin's status on Friday, 27-Oct-17 14:49:51 UTC
Intriguing: on the #BostonExpress, using the bus Wi-Fi, getting selectively #MITM'd. Connections to https://riseup.net are hijacked by something claiming to be a `Cisco Umbrella', while #HTTPS to other hosts seems to go unmolested: https://status.hackerposse.com/attachment/16361
kuro: #HTTPS is hurting users far away from your servers, and what to do about it https://is.gd/5mRkUe
kuro's status on Friday, 10-Mar-17 16:55:21 UTC
#HTTPS is hurting users far away from your servers, and what to do about it https://is.gd/5mRkUe
sl: Today I realized that my #ISP is globally trusted Certificate Authority #CA. So they can trivially #snoop / #eavesdrop all #HTTPS communications if and when required. Isn't that nice?
sl's status on Friday, 02-Sep-16 16:59:09 UTC
Today I realized that my #ISP is globally trusted Certificate Authority #CA. So they can trivially #snoop / #eavesdrop all #HTTPS communications if and when required. Isn't that nice?
mk: #https I'm using the "https everywhere" extension in Firefox. I just discovered a major logical flaw in it: sometimes a page jus isn't available as https, and you can change the protocol manually (back) to http. So far so good. But when you do this, it still attempts to load resources (such as scripts) via https - while you can pretty much expect they won't be available under https either - after all the main page wasn't written to support it. Result: a page that misbehaves badly because essential scripts (silently) don't load. !grrr It took me way too long to figure this out! For now I'll leave the extension disabled, for some sites I frequent this is just too disruptive. In addition, the extension cannot be configured to allow/disallow http for specific urls - another weakness. #logicalbug
mk's status on Sunday, 12-Jun-16 23:32:34 UTC
#https I'm using the "https everywhere" extension in Firefox. I just discovered a major logical flaw in it: sometimes a page jus isn't available as https, and you can change the protocol manually (back) to http. So far so good. But when you do this, it still attempts to load resources (such as scripts) via https - while you can pretty much expect they won't be available under https either - after all the main page wasn't written to support it. Result: a page that misbehaves badly because essential scripts (silently) don't load. !grrr It took me way too long to figure this out! For now I'll leave the extension disabled, for some sites I frequent this is just too disruptive. In addition, the extension cannot be configured to allow/disallow http for specific urls - another weakness. #logicalbug
erkanyilmaz: @heathenman Great! When will you enable #https, so chances for #MITM attacks are descreased? at least I get with https: SSL received a record that exceeded the maximum permissible length (Error code: ssl_error_rx_record_too_long)
erkanyilmaz's status on Monday, 25-Apr-16 08:05:34 UTC
@heathenman Great! When will you enable #https, so chances for #MITM attacks are descreased? at least I get with https: SSL received a record that exceeded the maximum permissible length (Error code: ssl_error_rx_record_too_long)
mmn: @bastianilso I generally use http://h45h.com which is a quick and dirty hack by @mikael - it uses the age-old HTTP method PUT and returns a URL with the filename directly related to the sha256 hash of upload contents. Code available here: https://github.com/mikaelfrykholm/h45h.com To try it out: $ curl -s -T file.jpg http://h45h.com/ (should of course be made to use #https if there's any interest in using it) But I guess there's also an interest in requesting a certain max hosting duration rather than keeping it indefinitely? Not that I know if imgur prunes or not...
mmn's status on Wednesday, 23-Mar-16 12:15:08 UTC
@bastianilso I generally use http://h45h.com which is a quick and dirty hack by @mikael - it uses the age-old HTTP method PUT and returns a URL with the filename directly related to the sha256 hash of upload contents. Code available here: https://github.com/mikaelfrykholm/h45h.com To try it out: $ curl -s -T file.jpg http://h45h.com/ (should of course be made to use #https if there's any interest in using it) But I guess there's also an interest in requesting a certain max hosting duration rather than keeping it indefinitely? Not that I know if imgur prunes or not...
mcscx: RT @lisam LibrePlanet.org is now using the Let's Encrypt CA: https://u.fsf.org/1in #letsencrypt #https #security #privacy
mcscx's status on Wednesday, 25-Nov-15 23:20:24 UTC
RT @lisam LibrePlanet.org is now using the Let's Encrypt CA: https://u.fsf.org/1in #letsencrypt #https #security #privacy
lisam: LibrePlanet.org is now using the Let's Encrypt CA: https://u.fsf.org/1in #letsencrypt #https #security #privacy
lisam's status on Wednesday, 25-Nov-15 22:25:13 UTC
LibrePlanet.org is now using the Let's Encrypt CA: https://u.fsf.org/1in #letsencrypt #https #security #privacy
boneidol: I love the way I can install #debian kvm guest by just giving a url to an installer image (e.g. http://ftp.uk.debian.org/debian/dists/stable/main/installer-amd64/ ) . Even better if it was #https though
boneidol's status on Sunday, 08-Feb-15 16:23:23 UTC
I love the way I can install #debian kvm guest by just giving a url to an installer image (e.g. http://ftp.uk.debian.org/debian/dists/stable/main/installer-amd64/ ) . Even better if it was #https though
erkan: does !diaspora use #encryption ( #ssl or otherwise)? the team strongly recommends default to #HTTPS, but: don't ultimately enforce it. Non-Public information exchanged between the servers are encrypted with the receivers public #key(s)
erkan's status on Saturday, 05-Jul-14 10:08:25 UTC
does !diaspora use #encryption ( #ssl or otherwise)? the team strongly recommends default to #HTTPS, but: don't ultimately enforce it. Non-Public information exchanged between the servers are encrypted with the receivers public #key(s)
lnxw48: make that #HTTPS or #XMPP for c2s
lnxw48's status on Monday, 30-Jun-14 00:51:42 UTC
make that #HTTPS or #XMPP for c2s
erkan: still doesn't work, no msg at all by crow about why it can't log in :-( has anyone run crow with a #https site?
erkan's status on Tuesday, 06-May-14 03:16:53 UTC
still doesn't work, no msg at all by crow about why it can't log in :-( has anyone run crow with a #https site?
erkanyilmaz: "Starting today, #Gmail will always use an encrypted #HTTPS connection when you check or send email", "In 2013, Gmail was available #99.978% of the time, which averages to less than 2 hours of disruption for a user for the entire year." http://gmailblog.blogspot.kr/2014/03/staying-at-forefront-of-email-security.html
erkanyilmaz's status on Thursday, 20-Mar-14 21:15:35 UTC
"Starting today, #Gmail will always use an encrypted #HTTPS connection when you check or send email", "In 2013, Gmail was available #99.978% of the time, which averages to less than 2 hours of disruption for a user for the entire year." http://gmailblog.blogspot.kr/2014/03/staying-at-forefront-of-email-security.html
erkanyilmaz: user asks: I need to get #zot! @question Is there any way you can run it without #https? Some other kind of security I can add instead maybe??
erkanyilmaz's status on Monday, 06-Jan-14 15:45:59 UTC
user asks: I need to get #zot! @question Is there any way you can run it without #https? Some other kind of security I can add instead maybe??
erkanyilmaz: If you do such a switch (http / #https): you've to be careful then with the other SNs' DBs. Their DBs will/might have old info about RDN in their DBs and communication won't work, be troublesome and one fix might be to ask those remote admins to fix their DBs or implement another solution :-( http://ur1.ca/etxzj
erkanyilmaz's status on Monday, 09-Dec-13 14:30:12 UTC
If you do such a switch (http / #https): you've to be careful then with the other SNs' DBs. Their DBs will/might have old info about RDN in their DBs and communication won't work, be troublesome and one fix might be to ask those remote admins to fix their DBs or implement another solution :-( http://federation.skilledtests.com/Statusnet_problems.html#if_above_2_methods_didn.27t_help
mcscx: !listening to 2 hr video of sounds of the sea on Youtube,hoping to get some work done. Using #https to keep #NSA busy http://qttr.at/aqq
mcscx's status on Monday, 04-Nov-13 23:35:22 UTC
!listening to 2 hr video of sounds of the sea on Youtube,hoping to get some work done. Using #https to keep #NSA busy http://qttr.at/aqq
erkanyilmaz: @donkrawallo schuld ist erst mal #statusnet, weil es die Software nicht hinbekommt (ich nehme an, der Wechsel von http auf #https hat das erzeugt, denn der Log-Output ist genau wie in diesem Fall)
erkanyilmaz's status on Sunday, 06-Oct-13 23:01:43 UTC
@donkrawallo schuld ist erst mal #statusnet, weil es die Software nicht hinbekommt (ich nehme an, der Wechsel von http auf #https hat das erzeugt, denn der Log-Output ist genau wie in diesem Fall)
erkanyilmaz: Wikimedia offers/forces since 1 week or so #https for registered accounts, but for countries like China or Iran that's a problem: they block https completely, so they are discussing if they exempt there https
erkanyilmaz's status on Saturday, 31-Aug-13 06:13:08 UTC
Wikimedia offers/forces since 1 week or so #https for registered accounts, but for countries like China or Iran that's a problem: they block https completely, so they are discussing if they exempt there https
mcscx: ... hm, I read the article a 2nd time. So Wikimedia wants to provide #https only for _logged-in users_?? Doesnt this make #suspicious?
mcscx's status on Sunday, 04-Aug-13 12:28:04 UTC
... hm, I read the article a 2nd time. So Wikimedia wants to provide #https only for _logged-in users_?? Doesnt this make #suspicious?
mcscx: @sazius OTOH it may be a step back in security to decrypt #PGP on my raspberry,then access cleartext via 'only' #https from remote #mailpile
mcscx's status on Sunday, 04-Aug-13 09:40:06 UTC
@sazius OTOH it may be a step back in security to decrypt #PGP on my raspberry,then access cleartext via 'only' #https from remote #mailpile
erkanyilmaz: @vinilox@status.vinilox.eu I see you have a #https statusnet - are you offering the possibility for new users to register on your server (e.g. after checking who they are) ?
erkanyilmaz's status on Monday, 22-Jul-13 11:36:25 UTC
@vinilox@status.vinilox.eu I see you have a #https statusnet - are you offering the possibility for new users to register on your server (e.g. after checking who they are) ?
erkanyilmaz: Wenn's ein #statusnet wird, wär's sehr gut, den gleich mit #https auszustatten, weil das Umstellen nachher sau-viele Probleme bereitet. Wir haben so wenige davon: http://federation.skilledtests.com/register.html
erkanyilmaz's status on Monday, 22-Jul-13 11:27:38 UTC
Wenn's ein #statusnet wird, wär's sehr gut, den gleich mit #https auszustatten, weil das Umstellen nachher sau-viele Probleme bereitet. Wir haben so wenige davon: http://federation.skilledtests.com/register.html
erkanyilmaz: the bug we fixed is this one: "#Remote subscription failed after remote switch to #https" http://status.net/open-source/issues/3219 which describes the effect but not the cause, important is this part in the text: "After removing the entry in #ostatus_profile and trying to subscribe again, it worked well." and the reason is: statusnet can NOT handle yet good enough when a statusnet changes its settings :-( cc @question
erkanyilmaz's status on Sunday, 21-Jul-13 13:34:03 UTC
the bug we fixed is this one: "#Remote subscription failed after remote switch to #https" http://status.net/open-source/issues/3219 which describes the effect but not the cause, important is this part in the text: "After removing the entry in #ostatus_profile and trying to subscribe again, it worked well." and the reason is: statusnet can NOT handle yet good enough when a statusnet changes its settings :-( cc @question
erkanyilmaz: "All that said, does truly perfect, NSA-proof #encryption exist? Yes, it’s called the one-time pad http://ur1.ca/el21g in which data is encrypted with a single-use pad of the same size by performing an #XOR operation." "There's a problem: in order to use a short-term #key to establish a session, we need to transmit it to another party in #plaintext." @question "What's wrong with that? Isn't that what public key #cryptography is all about? Well, there's a problem: the #NSA has just sniffed the short-term public key that was used to establish a particular session." "building a massive #datacenter in #Utah ... If they find you suspicious enough they want to #archive all your traffic" "When this happens, it means that #anyone (not just the NSA!) who can get their hands on a #quantum computer, and has captured one of your #HTTPS sessions, can break your session and recover the plaintext. Perfect forward #secrecy be damned!" "In order to defeat quantum computers, we wi http://ur1.ca/el21h
erkanyilmaz's status on Wednesday, 10-Jul-13 00:12:26 UTC
"All that said, does truly perfect, NSA-proof #encryption exist? Yes, it’s called the one-time pad http://ur1.ca/el21g in which data is encrypted with a single-use pad of the same size by performing an #XOR operation." "There's a problem: in order to use a short-term #key to establish a session, we need to transmit it to another party in #plaintext." @question "What's wrong with that? Isn't that what public key #cryptography is all about? Well, there's a problem: the #NSA has just sniffed the short-term public key that was used to establish a particular session." "building a massive #datacenter in #Utah ... If they find you suspicious enough they want to #archive all your traffic" "When this happens, it means that #anyone (not just the NSA!) who can get their hands on a #quantum computer, and has captured one of your #HTTPS sessions, can break your session and recover the plaintext. Perfect forward #secrecy be damned!" "In order to defeat quantum computers, we wi…
pztrn: It's time to switch one more of my sites to new domain and, probably, #https.
pztrn's status on Monday, 18-Mar-13 01:08:24 UTC
It's time to switch one more of my sites to new domain and, probably, #https.
pztrn: Who from !feds is using !statusnet on #https? I can't login to my account %) Is there a setting in database that will make everything good?
pztrn's status on Sunday, 17-Mar-13 00:16:16 UTC
Who from !feds is using !statusnet on #https? I can't login to my account %) Is there a setting in database that will make everything good?
tius: RT @atheist: #HTTPS Everywhere 3.0 protects users on-line http://tinyurl.com/8rgzmo2 !eff
tius's status on Thursday, 11-Oct-12 06:11:05 UTC
RT @atheist: #HTTPS Everywhere 3.0 protects users on-line http://tinyurl.com/8rgzmo2 !eff
atheist: #HTTPS Everywhere 3.0 protects users on-line http://tinyurl.com/8rgzmo2 !eff
atheist's status on Wednesday, 10-Oct-12 20:09:06 UTC
#HTTPS Everywhere 3.0 protects users on-line http://tinyurl.com/8rgzmo2 !eff
eff: Prediction: Version 3 of #HTTPS Everywhere will encrypt a trillion HTTP requests in the next year! https://eff.org/r.a6nq
eff's status on Tuesday, 09-Oct-12 18:13:10 UTC
Prediction: Version 3 of #HTTPS Everywhere will encrypt a trillion HTTP requests in the next year! https://eff.org/r.a6nq
eebrah: RD @slubman #owncloud #android app now available: http://goo.gl/uFTo6 (& it works with my #https setup) @nj3ma @coyo @fredmanglis @kelzOKO
eebrah's status on Sunday, 29-Apr-12 15:14:03 UTC
RD @slubman #owncloud #android app now available: http://goo.gl/uFTo6 (& it works with my #https setup) @nj3ma @coyo @fredmanglis @kelzOKO
michelenlared: ♺ @silner: !Google is globally switching its search to #HTTPS by default http://ping.fm/f3vID
michelenlared's status on Friday, 09-Mar-12 19:22:33 UTC
♺ @silner: !Google is globally switching its search to #HTTPS by default http://ping.fm/f3vID