We need something like cert-pinning for all websites we visit, not just mobile apps. Because NSA may have compromised many or all of the certificate signing authorities, such as Verisign, etc..
Indeed.
- How we secure our phones (SSL, cert pinning, PFS & more)
- http://resetthenet.tumblr.com/post/84327981750/how-we-secure-our-phones-ssl-cert-pinning-pfs
- How we secure the web (HTTPS, HSTS & PFS)
- http://resetthenet.tumblr.com/post/84137916350/how-we-secure-the-web-https-hsts-pfs
- Test your https website and server
- https://www.ssllabs.com/ssltest/
- The Privacy Pack
- http://resetthenet.tumblr.com/post/84331967485/the-privacy-pack
- The Reset the Net splash screen
- http://resetthenet.tumblr.com/post/84330794665/the-reset-the-net-splash-screen
Sign the Pledge:
"On June 5, I will take strong steps to protect my freedom from government mass surveillance. I expect the services I use to do the same."
- https://www.resetthenet.org/