summaryrefslogtreecommitdiffstats
path: root/speaker-notes
blob: e79323864369f4314085eee7372d8cd88bee90f7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
Which apps use WebView?
  A couple years ago, Jeremy checked all the PRISM Break apps to see which ones
obviously used WebView. He doesn't have the exact numbers, but it was something
like a third. Now it's a half. So WebView is becoming increasingly prevelant,
and quickly.

What's the matter with Chromium?
  * Chromium manipulates its extension API to prevent extensions from blocking
ads. They claim this is to prevent performance problems, which is a lie because
Mozilla already solved those performance problems in production via a tiny
tweak to the extension API that didn't impact ad blocking. Someone makes money
when browsers cripple ad blocking, and it's not you the user.
**Chromium is an antitrust violator and this harms the user's interests.**

  * Chromium does everything in their power to prevent users from escaping the
certificate authority system for TLS. Whether it's DNSSEC/DANE/TLSA,
perspective verification, HPKP, manual key pinning, OS-level key pinning,
or Namecoin, you can be pretty sure that if a mechanism exists to verify
TLS certificates without fully trusting public CA's, the Chromium devs have
tried to kill it.
**Chromium is hostile to users' security.**