Keeping the Watchers at Bay
summary
Recap of concrete wins and remaining fights: old attacks like Firesheep force migration from HTTP to HTTPS, Let's Encrypt and ACME automate free certs (≈100M active certs, ~50M domains) and browsers push HTTPS (Firefox ~90% TLS requests), TLS 1.3 lands with TLS 1.3 formal proofs and ~30% client use, QUIC hides most transport metadata but exposes a controversial spin bit, DoH/TRR sparks ISP and policy backlash while adaptive proxy ideas try to balance trust, and traffic‑analysis still fingerprints content despite encryption.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 2:33Why are we doing this
- 6:15Whats happened
- 11:38Common complaints
- 14:34Unhappy people
- 17:30TLS 13 transition
- 19:36TLS 13 pushback
- 21:59Quick
- 29:31Response
- 32:41Encryption
- 34:19Traffic Analysis
- 36:42Security
- 38:30Observations
- 43:15Questions
related talks
13mA Positive Security Talk
38mAsk the EFF
58m25 Years of SSL - Secure(ish) Sockets Layer
43mEmerging Web Security Standards
53mHansel and Gretel do TLS
53mThe BEAST Wins Again: Why TLS Keeps Failing to Protect HTTP
19mWhat's happening in TLS (transport layer security)?
37mHTTPS Is Better than Ever Before. Now Its Your Turn.