At EFF, we think people ought to be able to understand how their devices work and repair them without asking permission of the manufacturer. We also think independent repair companies should to be able to compete with manufacturers in the aftermarket. Simply put, you should be able to fix your...

Last month we were very pleased to announce our work with Mozilla, the University of Michigan, Cisco, Akamai and IdentTust on Let's Encrypt, a totally free and automated certificate authority that will be launching in summer 2015. In order to let mainstream browsers seamlessly connect securely to your...

A draft of the Trans-Pacific Partnership's (TPP) Intellectual Property chapter from May 2014 leaked this past fall, confirming what previous leaks had suggested: this so-called trade agreement would bring copyright enforcement provisions that threaten users' right to free expression, privacy, and unfettered access to knowledge...

Three major vulnerabilities rocked the world of Internet security this year, including two high-profile bugs that jeopardized the security of HTTPS encryption itself. These vulnerabilities may have each cost sysadmins around the world some sleepless nights, but they also reinforced the idea that best security practices can protect...

We've long worried about the government's use of IMSI catchers or cell site simulators. Commonly known as a "Stingray" after a specific device manufactured by the Harris Corporation, IMSI catchers masquerade as a legitimate cell phone tower, tricking phones nearby to connect to the device...

What if there were one thing we could do today to make it harder for the NSA and other intelligence agencies to eavesdrop on millions of people's email communications, without users having to change their habits at all?
There is. It's called STARTTLS for email, a standard for...