TLS 1.0 was released in 1999 as an upgrade from SSL 2.0 and 3.0.

And these days we’re on v1.3 - https://www.cloudflare.com/learning/ssl/why-use-tls-1.3/

Notice anything? There’s always a flaw. The general public hasn’t discovered it in TLS1.3…yet

And again, Banking websites, some stuff makes a lot of sense to use encryption.

Just not everywhere.

But what if… there’s a vulnerabilty…‘spooky noises’

You lack nuance in comprehension of complicated subjects. Are you a security researcher?

Oh look, we’ve found a security ‘researcher’. Mad that your job only consists of making other people’s job harder?

Try the DMV, that’s also a great place to work where you can inflict misery on others.

Valuable zero days aren’t exposed. They’re sold. If someone wants your data they will get it. HTTPS means nothing except huge amounts of wasted CPU cycles and energy.

You should triple encrypt your HD.

Just to be sure.

Move the goalposts some more. I never said forced.

You think your data is secure with HTTPS? There’s always an undisclosed vulnerability somewhere.

Patches solve specific issues but they do nothing for overall security.

Because I have reasonable views about security drawbacks? That when I see a vulnerability, I also look at the whole situation and decide if that’s an acceptable risk, rather than screaming “Security issue!” at the top of my lungs and pretending that patching this one vulnerability somehow makes a difference when there’s always another found the next week??

Security isn’t free, it costs us by making it harder to get work done. “Security researchers” only know how to cover their ass. I can do that without their shrieking cries of wolf.

Great for my banking website.

Not at all important my my IOT sensor network.

Not EVERYTHING needs to be HTTPS

This ‘encrypt’ everything is such a waste of CPU and energy. Plus “oops, all your files are gone, tee hee.” HTTPS everywhere is fucking stupid. More complexity for zero benefit.

It was made by Hollywood for Hollywood.

Congrats on chasing down a decade-old bug!

Lol, you think regulation and moderation aren’t poison themselves.

Because Sundar Pichai is woke. Nice try at gashlighting though.

“I share that feeling and especially regret that this happened during Pride month when we should be celebrating the incredible LGBTQ+ community you all have built at Google.” https://www.theverge.com/2019/6/12/18663017/google-ceo-sundar-pichai-lgbtq-employees-letter-harassment