Hacker News new | ask | show | jobs
by tylerhou 3038 days ago
How is HTTPS a centralization force? Just because large, centralized tech companies like Google are pushing for HTTPS doesn't make HTTPS itself inherently centralized -- apart from certificate authorities, but that's because DNS and the domain name system itself are already inherently centralized. And Let's Encrypt does exist, an organization which has published an open protocol for certificate negotiation (ACME) as well as an open implementation whose root certificate is accepted by all major browser vendors.

Saying HTTPS is centralized is like saying PGP is centralized. If it is, it's only because the underlying technologies (HTTP itself and DNS) are centralized, not an encryption and document-signing protocol layered on top of it.

Even if you can argue that HTTPS is a centralization force, it's almost certainly hyperbole to argue that it's the biggest centralization force on the web today. Surely network effects (Facebook, Amazon), huge amounts of capital, and control over a huge amount of information (Google) are far bigger factors?