Articles
When a company phones you and asks security questions, the security protects them, not you. You have no way to verify who called. The fix is to call them back on their published number, but companies rarely make that easy. ?
Thoughts
Wishing browsers could delegate TLS termination to a proxy the way servers delegate to CDNs -- transparently, without MITM. Current alternatives like Cloudflare's zero-trust require replacing the OS certificate store, which is too close to black-hat interception. ?
