Do you guys have any opinion about the EFF project?

[Rayser]

I want to know you guys opinion about:

Https Everywhere

https://www.eff.org/https-everywhere

The Privacy Badger

https://www.eff.org/pages/privacy-badger

And the project as a whole.

https://www.eff.org/

[xenopeek]

I no longer use HTTPS Everywhere (but I used it for a long time) as in Firefox you can enable HTTPS-Only Mode, in Privacy & Security settings, since last year I think. I've enabled it for all windows and that simply blocks all content in Firefox that isn't HTTPS. Any website that doesn't support HTTPS will be blocked. You can still bypass the "Secure Connection Not Available" message if you need to but by default all non-HTTPS content is blocked. Perfect.

Same for Privacy Badger I guess. I think Firefox' Enhanced Tracking Protection does pretty much the same thing. I've added uBlock Origin to block ads and I don't know that Privacy Badger adds anything to those two.

That said organizations such as the EFF are important for their advocacy and actions to defend digital rights and online privacy of citizens. I support a similar organization in my country called Bits of Freedom.

[Portreve]

I've given to EFF because I believe in their core mission. They often provide amicus briefs for cases they aren't directly involved in, and do everything they can, kind of like the ACLU and other groups, to better the overall condition of humanity.

[Schultz]

kind of like the ACLU and other groups, to better the overall condition of humanity.

That's debatable (and starting to veer off into politics).

[mikeflan]

Try to figure out how many https sites there are vs how many http sites there are. I did research and I never figured it out. I guess you could take the statistic from this site:
https://www.welivesecurity.com/2018/09/ ... tes-https/
which says that of the 1 million most visited websites, 52% (0.5 million) use https.
I very roughly apply that figure to the 1,500 million sites in the world, and guessed (and that is a WILD guess) that roughly 30 million sites use https. Obviously the number is far less than 52% of the total websites.

Perhaps that 30 million estimate is too high, since this website says that of the 1,500 million websites, only 200 million are active:
https://www.internetlivestats.com/total ... -websites/

I think it is safe to say that less than 2% of the websites in the world are https.
My website is still http.

[xenopeek]

very roughly apply that figure to the 1,500 million sites in the world, and guessed (and that is a WILD guess) that roughly 30 million sites use https.

Let's Encrypt alone has provided SSL certificates for almost 260 million domains and issues 2 million new certificates daily, and growing: https://letsencrypt.org/stats/. There are many more, and larger, SSL certificate providers. Your estimate is way too low.

The Firefox telemetry also on that pages shows 82%-92% of all web pages visited in the past two weeks were HTTPS.

My website is still http.

Why? SSL certificates are gratis and the EFF's Certbot will automate installation and renewal of certificates for you: https://certbot.eff.org/

[mikeflan]

My website is still http.

Why? SSL certificates are gratis and the EFF's Certbot will automate installation and renewal of certificates for you: https://certbot.eff.org/
[/quote]
No particular reason. I just don't see the need. Someday I will see the need and I will do it. Until then maybe I will learn something by not making the switch right away. Google telling me I will not be a favored site isn't much incentive. Just call me contrary.

[Portreve]

I don't visit non-https web sites and haven't done so in years (at least insofar as I am consciously aware) because the security risk, as far as I am concerned, exceeds the value of any content such a site might have.

Pjotr's Easy Linux Tips site is https for goodness' sake.