Hacker News new | past | comments | ask | show | jobs | submit login

Wikimedia seems to make a habit out of "considering" things for a long time before actually enabling them. Enabling forward secrecy is relatively straightforward.



At the scale of Wikimedia nothing is straightforward. Not even relatively.


This. We're talking about the fifth most popular site on the Web, operating on a budget smaller than my department at work.


Yes. However, if you do that, perhaps you're less motivated to find solutions to other, equally important problems with HTTPS.

  Enabling perfect forward secrecy is only useful if we also
  eliminate the threat of traffic analysis of HTTPS, which
  can be used to detect a user’s browsing activity, even
  when using HTTPS.


Traffic analysis is certainly an orthogonal problem to decryption of the ciphertext here. There's no reason to wait on one for the other.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: