PSA: Chrome changed its bypass keyword again, from badidea to thisisunsafe.
Show this thread
-
And make this overridable: for example, if you trust a particular self-signed cert you can pin that key as legit without the overhead of setting up a private PKI just to run the admin page on some embedded gizmo
Yeah, and warn if key trustworthiness ever downgrades (CA switches from more trusted to less). That would be ideal. Then I could just mark the big popular CAs as trusted and get warned if another Diginotar happens, without scary interstitials on sites I don't care about.
-
-
The other thing I do is have dedicated VMs for different purposes. One for online banking, one for social media, one for general browsing, etc. The banking VM gets a much shorter whitelist :)
-
That's one thing I'm too lazy to do... I do have different browser profiles to at least keep some separation. One of the things I'm working on now is a framework to move all my secrets (SSH keys, passwords, etc) to a secure, 2-factor authenticated isolated environment.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.