YoVDO

Encrypting the Web Isn't Enough - How EFF Plans to Encrypt the Entire Internet

Offered By: 0xdade via YouTube

Tags

ShmooCon Courses

Course Description

Overview

Explore the Electronic Frontier Foundation's (EFF) mission to encrypt the entire Internet in this 51-minute conference talk. Delve into the organization's decade-long journey to secure web communications through HTTPS adoption. Learn about the new STARTTLS Everywhere project, aimed at enhancing mailserver security. Discover the challenges faced in implementing widespread encryption, including issues with TLS ubiquity and configuration. Gain insights into automated solutions like ACME and future developments such as Encrypted SNI and DNS. Understand the practical implications for mailserver administrators and the importance of obtaining proper certificates. Engage with the speaker's call for feedback and collaboration to further advance Internet-wide encryption efforts.

Syllabus

Intro
We Petition the Government
We Rally Grassroots Support
EFF's Three Theories of Change
Let's Take a Trip Down Memory Lane
We tried the courts...
Ten years ago...
TLS Was Not Ubiquitous
Problem 1 & 2: TLS is not ubiquitous
How ACME Works
Problem 3 & 4: TLS/HTTPS Configuration
Current Events
What kinds of Automation?
The Future Looks Bright
Solution: Encrypted SNI
Encrypted DNS
This Ain't Theoretical
Get your mailserver a damn cert
Receiving Failure Reports
Posting MTA-STS Records/Policies


Taught by

0xdade

Related Courses

Chip Decapping on a Budget
0xdade via YouTube
Adventures in Hardware Hacking or Building Expensive Tools on a Budget
0xdade via YouTube
Whitelisting LD PRELOAD for Fun and No Profit
0xdade via YouTube
5G Protocol Vulnerabilities and Exploits
0xdade via YouTube
Real World Zero Trust Implementation
0xdade via YouTube