News Encrypt Everything

[AdultKing]

The Electronic Frontier Foundation (EFF) is helping to launch a new non-profit organization that aims to dramatically increase secure Internet browsing. Let's Encrypt is scheduled to offer free server certificates beginning in summer 2015.

"This project should boost everyday data protection for almost everyone who uses the Internet," said EFF Technology Projects Director Peter Eckersley. "Right now when you use the Web, many of your communications?your user names, passwords, and browsing histories?are vulnerable to hackers and others. By making it easy, fast, and free for websites to install encryption for their users, we will all be safer online."

Currently, most Internet traffic is unencrypted, meaning most interactions you have with websites leave your accounts vulnerable to eavesdropping by everyone from a minimally competent hacker to the U.S. government. The HTTPS protocol?in contrast to HTTP?encrypts your connection and verifies the authenticity of sites, protecting your data and personal information. EFF has been campaigning successfully for a number of years to spread HTTPS from payment pages and banking sites to email, social networking, and other types of sites. But there are still hundreds of millions of domains that lack this protection.

The new Let's Encrypt project aims to solve that. Let's Encrypt is a new free certificate authority, which will begin issuing server certificates in 2015. Server certificates are the anchor for any website that wants to offer HTTPS and encrypted traffic, proving that the server you are talking to is the server you intended to talk to. But these certificates have historically been expensive, as well as tricky to install and bothersome to update. The Let's Encrypt authority will offer server certificates at zero cost, supported by sophisticated new security protocols. The certificates will have automatic enrollment and renewal, and there will be publicly available records of all certificate issuance and revocation.

https://www.eff.org/press/releases/n...ternet-traffic

[JustDaveXxx]

Thats why I use a VPN Service.

Going on the internet without it is like banging a hooker without a condom.


Just Dave

[PAR]

This wont stop much...
User data will still be sold by Amazon google facebook etc..
Users will still get caught up in a net of less secure sites...

Hackers don't get 300,000,000 user data sets one user at a time they do it by attacking less secure databases...
Then testing the user | password combos against popular sites...

Not to mention if you do have malware it's gaining your details via keyloger etc...

[MrGusMuller]

Originally Posted by PAR

This wont stop much...
User data will still be sold by Amazon google facebook etc..
Users will still get caught up in a net of less secure sites...

Hackers don't get 300,000,000 user data sets one user at a time they do it by attacking less secure databases...
Then testing the user | password combos against popular sites...

Not to mention if you do have malware it's gaining your details via keyloger etc...

That's why I don't use internet or those fancy new things

[CaptainHowdy]

I've been encrypting my posts for a long while now ...

[editeur]

You cant really encrypt anything if you don't control hardware and OS - for example your phone or tablet. OS and apps work with unencrypted data.

[dicknipples]

Originally Posted by editeur

You cant really encrypt anything if you don't control hardware and OS - for example your phone or tablet. OS and apps work with unencrypted data.

[freecartoonporn]

Originally Posted by editeur

You cant really encrypt anything if you don't control hardware and OS - for example your phone or tablet. OS and apps work with unencrypted data.

android has feature called encrypt everything or something like that, in settings.

[editeur]

Originally Posted by freecartoonporn

android has feature called encrypt everything or something like that, in settings.

You can encrypt everything stored in the storage, sure.
But when you access the data it gets decrypted - apps work with unencrypted data and can do anythinng with it, for example send it to the owners of the app. Another thing is that when you encrypt data you do it though some crypto API. It's a part of the OS. So basically when you encrypt you give your raw data to the OS maker and tell him - please encrypt this. And the OS maker (Google) can deside what it will do - encrypt, or for this exact device save some of the data unencrypted somewhere on Google servers and only then encrypt.

This encryption would work against thieves and ISPs, sure, but not against OS maker and entities it collaborates with.