Certbot's Website Gets a Refresh
By Erica Portnoy
Certbot has a brand new website! Today we've launched a major update that will help Certbot's users get started even more quickly and easily.
Certbot is a free, open source software tool for enabling HTTPS on manually-administered websites, by automatically deploying Let's Encrypt certificates. Since we introduced it in 2016, Certbot has helped over a million users enable encryption on their sites, and we think this update will better meet the needs of the next million, and beyond.
Certbot is part of EFF's larger effort to encrypt the entire Internet. Websites need to use HTTPS to secure the web. Along with our browser add-on, HTTPS Everywhere, Certbot aims to build a network that is more structurally private, safe, and protected against censorship.
This change is the culmination of a year's work in understanding how users interact with the Certbot tool and information around it. Last year, the Certbot team ran user studies to identify areas of confusion—from questions users had when getting started to common mistakes that were often made. These findings led to changes in both the instructions for interacting with the command-line tool, and in how users get the full range of information necessary to set up HTTPS.
The new site will make it clearer what the best steps are for all users, whether that's understanding the prerequisites to running Certbot, getting clear steps to install and run it, or figuring out how to get HTTPS in their setup without using Certbot at all.
Over a year ago, Let's Encrypt hit 50 million active users—and counting. We hope this update will help us expand on that peak, and make unencrypted websites a thing of the past.
Deeplinks Blog by Gennie Gebhart, Eva Galperin | November 6, 2019
FTC Takes Action Against Stalkerware Company Retina-X
The FTC recently took action against stalkerware developer Retina-X, the company behind apps MobileSpy, PhoneSheriff, and Teenspy. The FTC settlement bars Retina-X from distributing its mobile apps until it can adequately secure user information and ensure its apps will only be used for "legitimate purposes." But here's...
Deeplinks Blog by Erica Portnoy | November 1, 2019
Why Adding Client-Side Scanning Breaks End-To-End Encryption
Recent attacks on encryption have diverged. On the one hand, we've seen Attorney General William Barr call for "lawful access" to encrypted communications, using arguments that have barely changed since the 1990's. But we've also seen suggestions from a different set of actors for more purportedly "reasonable" interventions...
Deeplinks Blog by Eva Galperin, Cindy Cohn | October 28, 2019
Private Companies, Government Surveillance Software and Human Rights
It's old news that governments around the world are misusing private company-sold digital surveillance software track and target people for human rights abuses. Recently, Amnesty International reported finding that two prominent Moroccan human rights defenders had been targeted using Israeli-based NSO Group's software. Just this week WhatsApp sued...
EFF and Partners Urge U.S. Lawmakers to Support New DoH Protocol for a More Secure Internet
San Francisco—The Electronic Frontier Foundation (EFF) today called on Congress to support implementation of an Internet protocol that encrypts web traffic, a critical tool that will lead to dramatic improvements in user privacy and help impede the ability of governments to track and censor people.EFF, joined by Consumer Reports and...
Deeplinks Blog by Gennie Gebhart, Jacob Hoffman-Andrews | October 9, 2019
Twitter "Unintentionally" Used Your Phone Number for Targeted Advertising
Stop us if you've heard this before: you give a tech company your personal information in order to use two-factor authentication, and later find out that they were using that security information for targeted advertising. That's exactly what Twitter fessed up to yesterday in an ...
Deeplinks Blog by Max Hunter | September 12, 2019
Encrypted DNS Could Help Close the Biggest Privacy Gap on the Internet. Why Are Some Groups Fighting Against It?
Thanks to the success of projects like Let's Encrypt and recent UX changes in the browsers, most page-loads are now encrypted with TLS. But DNS, the system that looks up a site's IP address when you type the site's name into your browser, remains unprotected by encryption. Because...
EFF, ACLU v. DOJ - Facebook Messenger unsealing
EFF, ACLU, and Stanford cybersecurity scholar Riana Pfefferkorn filed a petition in November 2018 asking a California federal court to make public a ruling that apparently denied a request by the Justice Department to force Facebook to break the encryption of its Messenger application in order to facilitate...
Deeplinks Blog by Lindsay Oliver | July 31, 2019
EFF at Vegas Security Week
EFF is back this year at Vegas Security Week, sometimes affectionately known as Hacker Summer Camp. Stop by our booths at BSides, Black Hat, and DEF CON to find out about the latest developments in protecting digital freedom, sign up for our action alerts and mailing list, and...
Deeplinks Blog by Cindy Cohn | July 29, 2019
Equifax Settlement Won't be Enough to Deter Future Breaches: The Law Must Catch Up
Last week, news broke of a large financial settlement for the massive 2017 Equifax data breach affecting 147 million Americans. While the direct compensation to those harmed and the fines paid are important, it's equally important to evaluate how much this result is likely to create strong incentives to...