Welcome to this month's newsletter!
In this issue:
This issue was prompted and inspired by – surprise! – Google. In April 2017, the Lord of Chrome announced that the browser would start warning its users of insecure pages when entering any data, or of all such pages in Incognito mode.
The change was scheduled for version 62, due for release half a year later, out now. It didn't materialize as promised [so far], but the direction is clear:
“Eventually, we plan to show the "Not secure" warning for all HTTP pages…”
Posted by Emily Schechter, Chrome Security Team
So, what's it all about, and how do Internet privacy issues relate to it?
Without much of technical jargon, HTTPS is a communication protocol between a browser [the client] and a web site [the server], just like HTTP is. The difference between the two is that the former is secured by a certificate stored on the server which
The same spoken out loud:Three good things about HTTPS (1:15 min.)
This site switched to HTTPS on October 19, 2017.
HTTPS is much more preferable than HTTP, no question about that. Sending your credit card information over an insecure connection is asking – screaming – for trouble.
However, the chance of falling victim to a man-in-the-middle attack [when offenders intercept communication between an insecure site and a user in front of her computer] during a stay on an informational page is rather theoretical.
Why? Well, because of its feeble cost-benefit ratio. Unless the site in question does require credit card details being sent unprotected, you should be quite safe.
The above presentation does pose another question altogether, if only in passing:
Did you get it? Just to make sure: "So an intermediary in the network can't modify or tamper with the data that's being sent. Only the server and the browser can."
I am pretty sure this wasn't intended to mean anything else except pointing out just another advantage of HTTPS over HTTP.
However, if you take it literally, you may as well raise your hand and ask: Well, what about the browser?
That's what we are going to explore.
Much of the following contents is just videos. I think they are important as they help understand that our online activities take place in public, and can have consequences we never expected or thought about.
Start with opening your browser security and privacy settings. Read all of them, and change some.
Move on to ensure all your gear – the computer, the tablet, the smartphone – is up to the mark, too. Follow the link to learn how to set up your devices for privacy protection.
Follow the link in the section below to learn more about making your online stay safer.
—Think about what monsters to share it with.
Tags: #inplainlight #https #donttrackme #privacymatters
Unattributed images on this page are sourced from public domain via Pixabay.
The page features videos from following YouTube channels delivered over "youtube-nocookie" domain:
Google Chrome Developers, Sesame Street, TED, The Economist, The Guardian.
Is it useful 👍? Awful 👎? Leave a message! Your comments help making this site better (and give me a kick—one way or another).
Jun 15, 18 10:45 AM
Jun 12, 18 04:01 PM