home.social

#webtrust — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #webtrust, aggregated by home.social.

fetched live
  1. Discussed Venn diagrams with a couple of friends this morning, especially in the context of illustrating the utility of including all 3 or 4 of a specific set of design principles when creating certain kinds of things, and learned about the difference between Venn diagrams and Euler diagrams.

    In short:
    * a Venn diagram shows ALL possible relationships between different sets
    * an Euler diagram shows only some relationships between different sets, typically focused on conveying relevant or the more important relationships

    If you want to dive into their history and why these differences matter, bookmark (or open new tab) this Scientific American article to rabbithole later:
    * https://www.scientificamerican.com/article/venn-diagrams-history-and-popularity-outside-of-math-explained/

    In pop culture and media, nearly any diagram of overlapping circles with labeled regions is (errantly) referred to as a “Venn diagram”.

    This is imprecise at best, outright incorrect in many cases, especially diagrams of four circles.

    A classic example is the “Ikigai” diagram:


    Many (examples below) call this a Venn diagram. It is not a Venn diagram. It is an Euler diagram.

    The Ikigai diagram fails to express two specific relationships between different sets, the two that contain opposing side circles but neither of the other two. The missing Ikigai sets relationships in particular:
    1. only “you are good at” AND “the world needs” (with neither of the other two)
    2. only “you love” AND “you can be paid for” (again with neither of the other two)

    If you Google web search for "examples of four circle venn diagrams", Gemini gets this wrong:


    And so do the majority of articles that Google shows in top results (which I’m not helping by linking here, but hey it’s Google’s job to fix its search quality, not mine. I was able to use Internet Archive links for two of them at least.)
    * https://web.archive.org/web/20260823204717/https://boardmix.com/knowledge/4-circle-venn-diagrams/
    * https://miro.com/templates/4-circle-venn-diagram/ (Miro’s own top template there is wrong, though others have contributed proper 4 set Venn diagrams)
    * https://web.archive.org/web/20260823205434/https://www.istockphoto.com/illustrations/venn-4-circles-diagram
    * https://www.educationworld.com/tools_templates/EW_venndiagram_4

    This has interesting implications for expertise and trust.

    Clearly by this one example search result, we cannot trust the expertise of "design tool" websites (boardmix, miro), nor stock photo websites.

    Nor can we trust educationworld as a place to be educated.

    Nor can we trust Google Search (or Google Gemini) to surface expertise above popular misconceptions.

    Perhaps a good example of when to use Wikipedia search instead of Google (or other generic) web search.

    Personally I generalize this example to “all proper nouns”, that is:

    * Wikipedia search proper nouns instead Google or other general web searching.

    You can make this more convenient by setting up “w” as a search shortcut for Wikipedia: https://tantek.com/2024/287/t2/setup-search-shortcuts-firefox

    For reference / more reading on Venn diagrams and Euler diagrams:
    * https://en.wikipedia.org/wiki/Venn_diagram
    * https://en.wikipedia.org/wiki/Euler_diagram

    #Venn #diagram #diagrams #VennDiagram #VennDiagrams #EulerDiagram #setTheory #relationships #Ikigai #fourCircles #fourCirclesVenn #fourCirclesVennDiagram #misconception #popMisconception #Google #GoogleSearch #GoogleWebSearch #webSearch #search #Gemini #GoogleGemini #GeminiWrong #expertise #trust #webTrust #Wikipedia
    #Blaugust #Blaugust2026

  2. #LetsEncrypt has suspended issuing certificates after it identified security issues in one of its roots (!)[^1]

    We temporarily disabled certificate issuance, deployed a configuration change to prevent future issuance from the cross-signed Gen Y hierarchy, and then re-enabled issuance. Certificate revocation and CRL generation remains functional for Gen Y certificates.

    A few days ago #DigiCert was hacked with a Windows (!) screensaver (!)[^2]

    I cannot but remind that both organisations are part of the #WebTrust cartel who had last year unrolled a massive “grassroots” smear campaign against EU #QWAC certificates, presenting them as “security and privacy threat”, whereas from both legal and technical point of view QWAC is much more secure:

    https://krvtz.net/en/posts/the-real-story-behind-eu-qwac.html

    [^1]: https://community.letsencrypt.org/t/2026-05-08-gen-y-cross-certified-subordinate-cas-missing-serverauth-eku/247105

    [^2]: https://cybersecuritynews.com/digicert-hacked-screensaver/

  3. 👮🏼‍♀️When you bake a gatekeeper right into your browser…but instead of placing that power in a transparent, representative organization (🌍 UN, W3C, etc.),
    you think: “Let’s just leave that to Google Search.” 🙃

    👉 Result: open-source projects like Immich get flagged as “dangerous.”

    #DigitalSovereignty #OpenSource #Google #WebTrust #DecentralizeTheWeb

    immich.app/blog/google-flags-i

  4. @danimo

    This is a complete misrepresentation of both #eIDAS and the #WebTrust that Mozilla tries to defend with its manipulative campaign. I explained it in details here:

    https://agora.echelon.pl/notice/AbOiM4RCpo4HpQzYzQ

    Specifically, “disallowing CT” is a completely invented accusation, just as “forcing browsers to include government root CA”, “enables surveillance” and “making it illegal to fix”. There’s literally zero evidence in the regulation supporting these accusations. And when Helme writes “it’s just EV”, it just demonstrates he has literally zero clue about what EU QCA infrastructure is.