All hail EFF's new Encrypt the Web with the HTTPS Everywhere Firefox Extension.
Recent Bluessky Posts- Jotwell Conlaw: Evan Bernick, How Originalism Makes Law, JOTWELL (August 31, 2026) (reviewing Alma Diamond, Lawfinding’s Dilemma: Legal Formalism, or Judicial Neutrality, 104 Or. L. Rev. 117 (2025)), conlaw.jotwell.com/how-original.... August 31, 2026 Jotwell
- This Wednesday, the Rules Committee will hear member testimony on reforming the House. It's no secret that Congress (and the House specifically) is in shambles. What I think--and what people generally don't understand--is that's because it's transforming into something else. August 31, 2026 Daniel Schuman
- Will Republicans ever get asked about support for/association with the hateful (yet oddly powerful) Lora Loomer in anything like the terms various Democrats have been asked the (formerly obscure and utterly powerless) Hasan Piker? I rather doubt it... www.advocate.com/politics/nat... August 31, 2026 Michael Froomkin
- Loomer said of FL Dem Senate nominee Angie Nixon, U.S. Reps. Ilhan Omar and Ayanna Pressley, former U.S. Rep. Cori Bush and Supreme Court Justice Ketanji Brown Jackson were “all ghetto, entitled, race-obsessed, destructive black BITCHES who are completely unfit for the power they hold.” August 31, 2026 Michael Froomkin
- AI? August 30, 2026 Michael Froomkin
i dunno, ssl is not trivial, server-side. insisting on it, all the time, will invariably increase load and break some sites that do automagical redirection (hotmail certainly, yahoo maybe, gmail probably not). IPv6 could in theory make this a moot point, but alas, it’ll get rolled out with widespread acceptance right around the 5th of Never.
I don’t think ipv6 has a lot to do with this (application support for ipsec? seriously??) but think this could be useful. I’m really not sure what’s at the end of the pipe and it may be the case that the endpoints are sufficiently widely distributed that computational load associated with SSL/TLS is largely a moot question. There are an awful lot of sites using unencrypted password-based authentication, and that needs to be protected (even though it won’t protect things like pop and imap).
Also, to the “5th of Never” comment, I’d probably go with the 3rd of Never – v6 support is already available on Google, Youtube, Facebook, and a bunch of other high-traffic sites. I work at a DOD-affiliated center and I’d guess the majority of my network traffic is transported over v6.
There are potentially some sort-of weird topological issues here (and getting back to the v6 thing, what *about* v6?) but on balance I’d say this is more good than bad, and that’s good.