Hacker News new | ask | show | jobs
by josephcsible 1859 days ago
Ha, good one. For the average company that breaks SSL, I expect something like this instead: "new corporate policy update: for security reasons, you're no longer allowed to visit HTTPS Web sites that use Let's Encrypt. If the Web site you want to visit still allows HTTP, that continues to be acceptable."
1 comments
hannob 1859 days ago
Ain't gonna happen. Let's Encrypt is too big to be ignored.

You can't practically use the web like that.

link
ethbr0 1859 days ago
> You can't practically use the web like that.

is looking at a corporate firewall blocking Stack Overflow right now

... "practical" is setting your expectations a bit high.

link
josephcsible 1859 days ago
We know this, but I don't think everyone does. I'm sure that at least some places will learn this the hard way.
link
hannob 1859 days ago
Maybe we just had a misunderstanding. What I was trying to say: Once this happens and everything breaks they will have an incentive to fix things quickly.

By no means do I expect vendors of "SSL inspection" devices to act any sooner than that.

link
0xbadcafebee 1859 days ago
They will just add an additional TLS proxy with a self-signed cert that ignores all validation. Security will be broken but users will be able to continue to do their work.
link