@bsdphk Great post! But, if there are people with no right to privacy, why is it a bad idea to MITM them? Makes the non-right more explicit.
Why @VarnishCache (still) won't have integrated SSL/TLS support (and why SSL Everywhere is a bad idea) https://www.varnish-cache.org/docs/trunk/phk/ssl_again.html …
-
-
-
@tomlokhorst It's bad because the protocols make no allowance for legally mandated MiTM, so it's always brute-force kludges.
End of conversation
New conversation -
-
-
RT
@bsdphk: Why@VarnishCache (still) won't have integrated SSL/TLS support https://www.varnish-cache.org/docs/trunk/phk/ssl_again.html …Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
RT
@bsdphk: Why@VarnishCache (still) won't have integrated SSL/TLS support (and why SSL Everywhere is a bad idea) https://www.varnish-cache.org/docs/trunk/phk/ssl_again.html …Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@bsdphk@ivanristic@varnishcache But#HAProxy does more than#TLS termination. Where do I find software that JUST does that alone?Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@bsdphk@VarnishCache@FransBouma It's no big deal, just add it yourself...Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.