Comment on Trump cuts funding to FOSS projects.

• gray@pawb.social ⁨1⁩ ⁨week⁩ ago

  Less HTTPS = easier government & advertiser data collection

  source

  • ShittyBeatlesFCPres@lemmy.world ⁨1⁩ ⁨week⁩ ago

    I’m pretty sure browsers don’t even load http sites anymore.

    source

    • AbidanYre@lemmy.world ⁨1⁩ ⁨week⁩ ago

      When I spin up a new self hosted service it’s easier to add caddy to the stack than to convince Firefox to load http.

      source

      • dparticiple@sh.itjust.works ⁨1⁩ ⁨week⁩ ago

        Tailscale is also ridiculously easy to use for this purpose. The serve and Funnel features make secure self hosting really easy from your tailnet (one can easily provision certificates for nodes using Let’s Encrypt from the CLI: tailscale.com/blog/reintroducing-serve-funnel

        source
    • cmnybo@discuss.tchncs.de ⁨1⁩ ⁨week⁩ ago

      HTTP works fine in Firefox unless you set it to HTTPS only. Even then, you only have to click off a warning to open an HTTP site.

      source

      • hakunawazo@lemmy.world ⁨1⁩ ⁨week⁩ ago

        But if you try to load a local resource as localhost in Firefox…
        Image

        For the sake of completeness:

        Firefox contains a security patch which restricts the kinds of files that pages can load (and methods of loading) when you open them from a file:// URL. This change was made to prevent exfiltration of valuable data within reach of a local page, as demonstrated in an available exploit.

        More info: https://developer.mozilla.org/docs/Web/HTTP/CORS/Errors/CORSRequestNotHttp

        about:config
        security.fileuri.strict_origin_policy
        change to false

        source
      • fluckx@lemmy.world ⁨1⁩ ⁨week⁩ ago

        I’d rather not send credentials over plain text. Even in a homelab environment

        source
    • StrawberryPigtails@lemmy.sdf.org ⁨1⁩ ⁨week⁩ ago

      They load. I have to specify http:// to get it to work though.

      source
    • gray@pawb.social ⁨1⁩ ⁨week⁩ ago

      I’m sure google will fix that in chrome, like killing adblocker functionality.

      source
• dan@upvote.au ⁨1⁩ ⁨week⁩ ago

  At least there’s some competitors now, which could be used as drop-in replacements if Let’s Encrypt were to disappear.

  source