Security 11 May , 2015
Mozilla’s plan to compel the use of encryption by default in Firefox faces backlash from Web developers.
Mozilla is on a mission to make encryption on the Web ubiquitous, but the cost could prove too high to pay. In a blog post made last week, Firefox Security Lead Richard Barnes declared that Mozilla would be “setting a date after which all new features [in Firefox] will be available only to secure websites.”
Without a secure connection, some features in Firefox would be disabled entirely, “especially features that pose risks to users’ security and privacy.”
After a robust discussion , Mozilla is committing to focus new development efforts on the secure web, and start removing capabilities from the non-secure web. There are two broad elements of this plan:
Why embark on such a radical plan? Mozilla’s recent history provides a broad hint.Back in November, Mozilla announced co-sponsorship of a certificate authority,Let’s Encrypt. But even with a solution like Let’s Encrypt readily available, developers would need a lot of concessions before they would feel comfortable with it. Hope to have best from Mozilla.
You might want to get through