1. 5
    Opportunistic Encryption For Firefox browsers security bitsup.blogspot.com
    journeysquid avatar via journeysquid 3 years ago | cached | 2 comments

  1.  

  2. 2
    jcs avatar jcs 3 years ago | link

    But if you have long tail of legacy content that you cannot yet get migrated to https, commonly due to mixed-content rules and interactions with third parties, OE provides a mechanism for an encrypted transport of http:// data. That’s a strict improvement over the cleartext alternative.

    Two simple steps to configure a server for OE

    Install a TLS based h2 or spdy server on a separate port. 443 is a good choice :). You can use a self-signed certificate if you like because OE is not authenticated.

    I don’t get it, who is going to be able to setup an HTTP2 or SPDY server and generate a cert, but not be able to get a signed cert?

    1. 3
      tedu avatar tedu 3 years ago | link

      Me. :)