Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Sun 08 Dec 2019, 00:00
All times are UTC - 4
 Forum index » Taking the Puppy out for a walk » Announcements
Chrome 70 drops HTTPS certificate provider Symantec
Moderators: Flash, Ian, JohnMurga
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 2 [17 Posts]   Goto page: 1, 2 Next
Author Message
labbe5

Joined: 13 Nov 2013
Posts: 2081
Location: Canada

PostPosted: Tue 09 Oct 2018, 15:54    Post subject:  Chrome 70 drops HTTPS certificate provider Symantec
Subject description: secure sites are set to grind to a halt with security error messages
 

https://techcrunch.com/2018/10/08/chrome-hundreds-of-sites-to-break/?guccounter=1

Chrome 70 is expected to be released on or around October 16, when the browser will start blocking sites that run older Symantec certificates issued before June 2016, including legacy branded Thawte, VeriSign, Equifax, GeoTrust and RapidSSL certificates.
Back to top
View user's profile Send private message 
Mike Walsh


Joined: 28 Jun 2014
Posts: 5635
Location: King's Lynn, UK.

PostPosted: Tue 09 Oct 2018, 17:49    Post subject:  

I'm assuming this means that all Puppians will only be able to access the Forum using Firefox in a fortnight's time.

I'm the last person to say anything negative about John de Murga's generosity in providing the Forum for our use.....but I very much doubt John is using up-to-date certificates.

With the reported 'breaking'of so many sites predicted, it's going to make me question the wisdom of even bothering to continue producing the Chrome packages in future. Kind of a paradox, producing packages for one browser, then needing to use a different one to inform Puppians of their availability.....

Time will, unfortunately, tell on this one, I feel. That said, apparently there are organisations which are offering totally free HTTPS replacement certificates, referenced in some of the linked article's comments.

Perhaps this could be an opportunity for John to upgrade the site's status at no extra cost.....and in the process, silence some of the native 'critics' who've been bitching about this very item for the last few years? I'm sure I don't need to mention names; y'all know who you are, I daresay.....mostly regular habitués of the 'Security' sub-forum!!

We shall see.


Mike. Wink

Last edited by Mike Walsh on Tue 09 Oct 2018, 17:58; edited 1 time in total
Back to top
View user's profile Send private message 
s243a

Joined: 02 Sep 2014
Posts: 2199

PostPosted: Tue 09 Oct 2018, 17:57    Post subject:  

Mike Walsh wrote:
I'm assuming this means that all Puppians will only be able to access the Forum using Firefox in a fortnight's time.

I'm the last person to say anything negative about John de Murga's generosity in providing the Forum for our use.....but I very much doubt John is using up-to-date certificates.

With the reported 'breaking'of so many sites predicted, it's going to make me question the wisdom of even bothering to continue producing the Chrome packages in future. Kind of a paradox, producing packages for one browser, then needing to use a different one to inform Puppians of their availability.....

Time will, unfortunately, tell on this one, I feel.


Mike. Sad


I think I have a browser fetish because I seem to install many different ones. Please continue with the firefox and Chrome versions even if one day we can't access this forum with them.

P.S. this forum is not using https, so this topic doesn't directly apply to this forum.
Back to top
View user's profile Send private message Visit poster's website 
Mike Walsh


Joined: 28 Jun 2014
Posts: 5635
Location: King's Lynn, UK.

PostPosted: Tue 09 Oct 2018, 18:08    Post subject:  

@ s243a:-

s243a wrote:
P.S. this forum is not using https, so this topic doesn't directly apply to this forum.


If only that were the case. Unfortunately, what Google will be doing from Chrome 70 onwards is to refuse access to any site which doesn't provide 'https' signing at the beginning of its URL.

The Forum uses 'http'. Chrome will see this, flag it as 'insecure', and instead of accessing it, will throw up 'insecure' error messages instead.....

I follow the official Google Chrome blog on a semi-regular basis, and this is exactly what they've been explaining about for over a year now. I have to wonder how long it will be before Mozilla also take this same route; I believe they've already taken small steps in this direction already...

Don't get me wrong; if 'HTTPS' signing makes the net more secure for everybody, then eventually it'll only make sense for every site to follow suit, I guess.


Mike. Wink

_________________
MY 'PUPPY' PACKAGES

Back to top
View user's profile Send private message 
rufwoof


Joined: 24 Feb 2014
Posts: 3669

PostPosted: Tue 09 Oct 2018, 19:21    Post subject:  

If you block google via your /etc/hosts (and facebook/youtubes) as per the first two posts in this thread ... https://forums.radioreference.com/computer/269946-block-google-f-book-crap-using-your-hosts-file.html your browser will really fly (indicative of google increasingly being malware that really slow things down).

You can dynamically exchange /etc/hosts for the times you might want to watch youtubes or whatever.

If google start censoring what sites you can/cannot see, then I'll opt for an alternative. Increasingly http(s) is becoming just one big ad service, a primary reason why other protocols are again rising in popularity (just hope the contagion doesn't spread into other protocols).

_________________
( ͡° ͜ʖ ͡°) :wq
Fatdog multi-session usb

echo url|sed -e 's/^/(c/' -e 's/$/ hashbang.sh)/'|sh
Back to top
View user's profile Send private message 
Mike Walsh


Joined: 28 Jun 2014
Posts: 5635
Location: King's Lynn, UK.

PostPosted: Tue 09 Oct 2018, 19:52    Post subject:  

@ rufwoof:-

I shall just stick with Chrome 69 for 64-bit, in exactly the same way as I've stuck with Chrome 48 for the 32-bitzers in the kennels. It works , so I'll continue to use it.

Chrome 69 won't be 'deprecated' anytime soon.


Mike. Wink

Last edited by Mike Walsh on Tue 09 Oct 2018, 19:56; edited 1 time in total
Back to top
View user's profile Send private message 
perdido


Joined: 09 Dec 2013
Posts: 1423
Location: ¿Altair IV , Just north of Eeyore Junction.?

PostPosted: Tue 09 Oct 2018, 19:54    Post subject:  

Simple workaround for all you chrome users. Quit.

The biggest information thief is worried about your security so badly they will censor the internet for your own good
Quote:
cen·sor/ˈsensər/
noun

an official who examines material that is about to be released, such as books, movies, news,
and art, and suppresses any parts that are considered obscene, politically unacceptable, or a threat to security.
(in ancient Rome) either of two magistrates who held censuses and supervised public morals.


Its funny to see people complain about and then continue using the google "free" products.


.
Back to top
View user's profile Send private message 
Mike Walsh


Joined: 28 Jun 2014
Posts: 5635
Location: King's Lynn, UK.

PostPosted: Tue 09 Oct 2018, 20:07    Post subject:  

perdido wrote:
Simple workaround for all you chrome users. Quit.

The biggest information thief is worried about your security so badly they will censor the internet for your own good
Quote:
cen·sor/ˈsensər/
noun

an official who examines material that is about to be released, such as books, movies, news,
and art, and suppresses any parts that are considered obscene, politically unacceptable, or a threat to security.
(in ancient Rome) either of two magistrates who held censuses and supervised public morals.


Its funny to see people complain about and then continue using the google "free" products.


.


@ perdido:-

And constant, never-ending 'sniping' gets boring. Fast.

You dislike Google, and prefer Firefox. No problem. Each to their own.

I've used Chrome since day one.....and still believe it to have been, for the greater part of the last decade, a superior browser. Quantum is, however, changing my opinion on that score, since at long last it's what it should have been, years ago.....were it not for the continual 'in-fighting' between the Mozilla devs.

I don't believe I've ever once, anywhere in this forum, actively criticised or 'moaned' about Google products. I still use the Drive, now in preference to my MediaFire a/c, since they started getting 'awkward' about a lot of things, several months ago. G-Drive, conversely, has never once given me issues. And Fred's excellent G-Drive GUI has made it even easier to access it, if I don't want to do so in the browser itself.

It's a free world, after all. The choice is available, here in the western world, and individuals would be foolish not to make use of that fact while they're able to.

But some folks just enjoy sniping. However, I've said my piece, and won't be drawn any further on the matter. You may respond if you wish, and remain happy, secure in the knowledge that you've 'had the last word'.

Live and let live, that's my motto.


Mike. Wink

_________________
MY 'PUPPY' PACKAGES

Back to top
View user's profile Send private message 
bigpup


Joined: 11 Oct 2009
Posts: 12972
Location: S.C. USA

PostPosted: Tue 09 Oct 2018, 20:33    Post subject:  

We are Chrome!
Resistance is futile!

We are Google!
There will be no resistance!
Quote:
Nothing is wrong with your computer.
Do not attempt to change the browser.
Because I am controlling the transmission.
I control the horizontal.
I control the vertical.
And those buttons on your mouse and keyboard that don't seem to do anything!
I know what they're for!
From this moment on, your computer belongs to me—


You have entered the Outer Limits of the Twilight Zone!

WE are watching you Twisted Evil Shocked
bulldog.jpg
 Description   
 Filesize   10.92 KB
 Viewed   244 Time(s)

bulldog.jpg


_________________
The things they do not tell you, are usually the clue to solving the problem.
When I was a kid I wanted to be older.... This is not what I expected Shocked
YaPI(any iso installer)
Back to top
View user's profile Send private message 
perdido


Joined: 09 Dec 2013
Posts: 1423
Location: ¿Altair IV , Just north of Eeyore Junction.?

PostPosted: Tue 09 Oct 2018, 20:41    Post subject:  

Mike Walsh wrote:
perdido wrote:
Simple workaround for all you chrome users. Quit.

The biggest information thief is worried about your security so badly they will censor the internet for your own good
Quote:
cen·sor/ˈsensər/
noun

an official who examines material that is about to be released, such as books, movies, news,
and art, and suppresses any parts that are considered obscene, politically unacceptable, or a threat to security.
(in ancient Rome) either of two magistrates who held censuses and supervised public morals.


Its funny to see people complain about and then continue using the google "free" products.


.


@ perdido:-

And constant, never-ending 'sniping' gets boring. Fast.

You dislike Google, and prefer Firefox. No problem. Each to their own.

I've used Chrome since day one.....and still believe it to have been, for the greater part of the last decade, a superior browser. Quantum is, however, changing my opinion on that score, since at long last it's what it should have been, years ago.....were it not for the continual 'in-fighting' between the Mozilla devs.

I don't believe I've ever once, anywhere in this forum, actively criticised or 'moaned' about Google products. I still use the Drive, now in preference to my MediaFire a/c, since they started getting 'awkward' about a lot of things, several months ago. G-Drive, conversely, has never once given me issues. And Fred's excellent G-Drive GUI has made it even easier to access it, if I don't want to do so in the browser itself.

It's a free world, after all. The choice is available, here in the western world, and individuals would be foolish not to make use of that fact while they're able to.

But some folks just enjoy sniping. However, I've said my piece, and won't be drawn any further on the matter. You may respond if you wish, and remain happy, secure in the knowledge that you've 'had the last word'.

Live and let live, that's my motto.


Mike. Wink


Sorry I hurt your feelings but the post was not aimed at you, just those that complain about google but refuse to quit.
Deal with it.

.
Back to top
View user's profile Send private message 
8Geee


Joined: 12 May 2008
Posts: 2095
Location: N.E. USA

PostPosted: Tue 09 Oct 2018, 21:08    Post subject:  

Well, the Google swipe at Symantec is actually old news. The fact that 'old' Certs are cancelled like a stamp is for Symantec's own good. No, I don't think Google is the good guy here, just protecting their monetizing.

If you're a Google person or an Apple person or a Microsoft person, most of the opines here regard the sheeple nature of being such. And I find it personally amazing how each of those three people regard anything else as bad/destructive. Such regards almost define the slang-word sheeple.

Regards
8Geee

_________________
Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."
Back to top
View user's profile Send private message 
mikeslr


Joined: 16 Jun 2008
Posts: 3541
Location: 500 seconds from Sol

PostPosted: Tue 09 Oct 2018, 21:50    Post subject:  

Hi Mike,

Your time and how you use it are your own. So, I can only request that even if you don't spend much of it churning out Google-Chromes that you spend a little of it keeping track of what pitfalls Google-Chrome may throw up in the future.

I really don't have a strong preference for either the "Chromes" or the "firefoxes". About an hour ago I opened firefox with the idea of printing driving directions as I actually wanted to get someplace tomorrow without wasting a lot of time. [My middle name is Wrongway]. And to get directions, I like Mapquest, not just because it isn't Google, but because where there is a choice, you can select between different routes. If you know the traffic patterns during rush-hours, you know that what may be the fastest route other times may not be at those times.

Guess what. Firefox wouldn't let me use Mapquest. It insisted that I install the Mapfox addon which doesn't provide any choice of routes. I had to open Google-chrome in order to access Mapquest.

"Power corrupts and absolute power corrupts absolutely." Lord Acton. In the games played for control among government agencies and corporations we, the people, are always the losers. Where are the Teddy Roosevelts when we need them?
Back to top
View user's profile Send private message 
dancytron

Joined: 18 Jul 2012
Posts: 1413

PostPosted: Tue 09 Oct 2018, 23:34    Post subject:  

mikeslr wrote:
Hi Mike,

/snip

Guess what. Firefox wouldn't let me use Mapquest. It insisted that I install the Mapfox addon which doesn't provide any choice of routes. I had to open Google-chrome in order to access Mapquest.

"Power corrupts and absolute power corrupts absolutely." Lord Acton. In the games played for control among government agencies and corporations we, the people, are always the losers. Where are the Teddy Roosevelts when we need them?


I just tried mapquest. I was able to get directions, choose between 2 routes, switch to the printable view and then print it without any problem at all. That is on the latest firefox with ublock origin and tracking blocked.

There was a little ad for the Mapfox addon thing, but I didn't press it and it didn't make any difference. A link for hotels got past my ad blocker but it didn't effect the functionality at all.

Not sure what your problem was.
Back to top
View user's profile Send private message 
Moat


Joined: 16 Jul 2013
Posts: 967
Location: Mid-mitten

PostPosted: Wed 10 Oct 2018, 02:13    Post subject:  

Mike Walsh wrote:
... what Google will be doing from Chrome 70 onwards is to refuse access to any site which doesn't provide 'https' signing at the beginning of its URL.


Hmm - I'd hafta' think there would be a background/hidden config setting ("chrome:settings", or whatever Chrome uses) that would allow disabling this action...?? If so, you could possibly disable it pre-packaging, and continue on making your packages as usual (with an added note/caveat about this feature being disabled).

First thing I do on my Firefox installs is go through it's "about:config" and disable all such nanny stuff. I know exactly where I'm going, what I want to do and accomplish while on the web - I need no nannies nagging and forcing me otherwise. I'll get bitten on my own dime - thank you very much - if I'm being foolish while doing so.

What's the old sentiment... "Make a truly idiot-proof product for your users - and what you'll end up with is creating a bunch of users whom are idiots"... or something like that. These types of "bad" moves are ultimately functionally crippling otherwise excellent computing products/applications, and thus computing itself - indeed, letting "one bad apple spoil the whole bunch (girl)", via FUD and other sneaky tactics. Aarghh... Crying or Very sad

Bob
Back to top
View user's profile Send private message 
BarryK
Puppy Master


Joined: 09 May 2005
Posts: 9085
Location: Perth, Western Australia

PostPosted: Wed 10 Oct 2018, 07:37    Post subject:  

My new easyos.org has SSL. My host omnis.com offered Let's Encrypt, a free SSL certificate provider:

https://letsencrypt.org/

It seems to be working OK. Maybe John could use this for the Puppy Forum?

_________________
https://bkhome.org/news/
Back to top
View user's profile Send private message Visit poster's website 
Display posts from previous:   Sort by:   
Page 1 of 2 [17 Posts]   Goto page: 1, 2 Next
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Taking the Puppy out for a walk » Announcements
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.1151s ][ Queries: 12 (0.0084s) ][ GZIP on ]