• 1 Post
  • 53 Comments
Joined 11 months ago
cake
Cake day: February 20th, 2025

help-circle






  • The point is, if the certificate gets stolen, there’s no GOOD mechanism for marking it bad.

    If your password gets stolen, only two entities need to be told it’s invalid. You and the website the password is for.

    If an SSL certificate is stolen, everyone who would potentially use the website need to know, and they need to know before they try to contact the website. SSL certificate revocation is a very difficult communication problem, and it’s mostly ignored by browsers because of the major performance issues it brings having to double check SSL certs with a third party.











  • No, this is completely different. Incognito mode deletes all browsing data (locally) once the window closes.

    This allows you to say, be logged into Facebook on one profile, logged into Google on a different profile, and logged into your daily browsing in a third profile. Or you can have multiple logged in YouTube sessions in case you’re a content creator, you can have a profile for each of your channels.

    This way the cookies for each aren’t intermixed, and it would make it (slightly) harder to correlate browsing habits from embedded cookies or logged in sessions, or just to keep tabs and browsing history separate.