<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jun 4, 2021 at 7:49 AM Ulrich Windl <<a href="mailto:Ulrich.Windl@rz.uni-regensburg.de">Ulrich.Windl@rz.uni-regensburg.de</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">>>> Greg KH <<a href="mailto:gregkh@linuxfoundation.org" target="_blank">gregkh@linuxfoundation.org</a>> schrieb am 02.06.2021 um 16:39 in<br>
Nachricht <YLeYEY1Em19/<a href="mailto:d%2BxQ@kroah.com" target="_blank">d+xQ@kroah.com</a>>:<br>
> On Wed, Jun 02, 2021 at 03:48:41PM +0200, Reindl Harald wrote:<br>
>> <br>
>> <br>
>> Am 02.06.21 um 07:04 schrieb Greg KH:<br>
>> > On Tue, Jun 01, 2021 at 09:38:37PM +0200, Michael Biebl wrote:<br>
>> > > Am Di., 1. Juni 2021 um 20:44 Uhr schrieb Greg KH <br>
><<a href="mailto:gregkh@linuxfoundation.org" target="_blank">gregkh@linuxfoundation.org</a>>:<br>
>> > > > Works for me! Make sure you are not trying to connect to 'https'.<br>
>> > > <br>
>> > > No https? Why?<br>
>> > <br>
>> > Because why would serving up text files about this topic requires https?<br>
>> <br>
>> sorry, but we have 2021<br>
>> <br>
>> * non‑https is a warning in most browsers<br>
>> * certifictes are free and automated these days<br>
>> * https is not only about encryption<br>
>> <br>
>> the point of https is<br>
>> <br>
>> a) you are connected to the host you think<br>
>> b) no manipulation on the wire<br>
>> <br>
>> the encryption is not really the point<br>
> <br>
> Then don't connect to the site if you don't want the data there. Trying<br>
> to tell others what to do with their spare time in maintaining a<br>
> resource for all operating systems to use is a bit, well, you know...<br>
<br>
I think any website that has a form to fill in should offer https.<br>
In the past there were websites asking for user and password without offering<br>
https.<br>
I also think even a self-signed certificate is better tan no certificate at<br>
all, but in the times of let'S encrypt setting up https shouldn't be a big<br>
issue.<br>
<br>
All my opinion...<br>
<br>
Regards,<br>
Ulrich<br></blockquote><div><br></div><div>If I am not misinterpreting, Mr. Biden's recent cyber security execute order [1] will put a weight on how data is transferred, at least in the US, at least for the agencies which will probably ripple itself to the ordinary user eventually. </div><div><br></div><div>[1] <a href="https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/">https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/</a></div><div>Multiple mentions of "<i>encryption for data at rest and in transit</i>". </div><div><br></div><div>Umut</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
<br>
> <br>
> greg "i am a horrible sysadmin" k‑h<br>
> _______________________________________________<br>
> systemd‑devel mailing list<br>
> systemd‑<a href="mailto:devel@lists.freedesktop.org" target="_blank">devel@lists.freedesktop.org</a> <br>
> <a href="https://lists.freedesktop.org/mailman/listinfo/systemd" rel="noreferrer" target="_blank">https://lists.freedesktop.org/mailman/listinfo/systemd</a>‑devel <br>
<br>
<br>
<br>
_______________________________________________<br>
systemd-devel mailing list<br>
<a href="mailto:systemd-devel@lists.freedesktop.org" target="_blank">systemd-devel@lists.freedesktop.org</a><br>
<a href="https://lists.freedesktop.org/mailman/listinfo/systemd-devel" rel="noreferrer" target="_blank">https://lists.freedesktop.org/mailman/listinfo/systemd-devel</a><br>
</blockquote></div></div></div></div>