Conversation:

Notices

1. Joshua Judson Rosen (rozzin)'s status on Sunday, 26-Oct-2014 16:39:58 EDT Joshua Judson Rosen
   I really need to get TLS working for secure file-transfers on sketchydownloads.com.
   • lnxw48 (Linux Walt) (lnxw48)'s status on Sunday, 26-Oct-2014 16:51:20 EDT lnxw48 (Linux Walt)

     Remote profile options...

     • Joshua Judson Rosen

     @rozzin With a domain name like that, do you really get many people willing to download? I think people should be just a little paranoid—anything seems a little bit “off” and they should avoid the site completely.

     Joshua Judson Rosen repeated this.
   • Joshua Judson Rosen (rozzin)'s status on Sunday, 26-Oct-2014 16:51:51 EDT Joshua Judson Rosen
     Debating whether sketchydownloads.com should use #HSTS, and what grade certificate I should use.
   • Joshua Judson Rosen (rozzin)'s status on Sunday, 26-Oct-2014 17:06:23 EDT Joshua Judson Rosen

     • lnxw48 (Linux Walt)
     I think people should be a lot paranoid and not trust
     MMN-o ✅⃠ likes this.
   • Joshua Judson Rosen (rozzin)'s status on Sunday, 26-Oct-2014 17:12:09 EDT Joshua Judson Rosen
     OMFG itchy trigger-finger--I didn't mean to say people should be *that* paranoid....
   • Joshua Judson Rosen (rozzin)'s status on Sunday, 26-Oct-2014 20:39:07 EDT Joshua Judson Rosen

     • lnxw48 (Linux Walt)
     I think people should be a lot #paranoid and not base #trust of data-transfers on whether the endpoints appear to have good #DNS names.
   • MMN-o ✅⃠ (mmn)'s status on Monday, 27-Oct-2014 04:11:06 EDT MMN-o ✅⃠

     Remote profile options...

     • Joshua Judson Rosen
     /me does not trust
   • Joshua Judson Rosen (rozzin)'s status on Monday, 03-Nov-2014 00:09:40 EST Joshua Judson Rosen

     • lnxw48 (Linux Walt)
     @lnxw48, if you can verify via #crypto the #goodguy #identity of the file-provider and/or file, address doesn't really matter. That's what makes using mirrors of signed packages viable.
   • Joshua Judson Rosen (rozzin)'s status on Monday, 03-Nov-2014 00:12:53 EST Joshua Judson Rosen

     • lnxw48 (Linux Walt)
     @lnxw48, I actually use sketchydownloads.com for sharing specific files with specific people, in addition to the joke in the front page.
   • Joshua Judson Rosen (rozzin)'s status on Monday, 03-Nov-2014 00:15:23 EST Joshua Judson Rosen

     • lnxw48 (Linux Walt)
     @lnxw48, I'd much rather people who #trust me #verify that they're actually getting a file _from me_ than from "the right domain".
   • Joshua Judson Rosen (rozzin)'s status on Monday, 03-Nov-2014 01:06:03 EST Joshua Judson Rosen

     • lnxw48 (Linux Walt)
     @lnxw48, the big #joke in sketchydownloads.com is: the downloads there are some of the most trustworthy around, but nobody will ever know.