Skip to main content

Computer security and the lack of computer security is a fundamental issue that underpins much of how the Internet does (and doesn't) function. Many of the policy issues that EFF works on are linked to security in deep ways including privacy and anonymity, DRM, censorship, and network neutrality.

EFF works directly on a wide range of security issues including increased deployment of cryptographic protocols through projects like HTTPS Everywhere and Certbot; improving the security of those protocols with the SSL Observatory; offering legal assistance to researchers through our Coders' Rights Project; offering practical security advice to activists through the surveillance self-defense project; directly auditing open source codebases; and working on the development of new security standards.

Security Highlights

Encrypting the Web

The web is in the middle of a massive change from non-secure HTTP to the more secure HTTPS protocol. All web servers use one of these two protocols to get web pages from the server to your browser. HTTP has serious problems that make it vulnerable to eavesdropping and content...

Coders' Rights Project

EFF's Coders' Rights Project protects programmers and developers engaged in cutting-edge exploration of technology. Security and encryption researchers help build a safer future for all of us using digital technologies, but too many legitimate researchers face serious legal challenges that prevent or inhibit their work. These challenges come from laws...

Security Updates

Diebold v. North Carolina Board of Elections

EFF fought for transparent elections, forcing e-voting companies to comply with North Carolina state law. In November 2005, Diebold Election Systems filed suit against the North Carolina Board of Elections to avoid a law requiring vendors to place their machines' source code into escrow. EFF intervened in the case, getting...
Broken laptop

Facebook v. Power Ventures

EFF has urged a San Francisco federal court and the Ninth Circuit Court of Appeals to dismiss Facebook's claims that criminal law is violated when its users opt for an add-on service that helps them aggregate their information from a variety of social networking sites. Power Ventures was a company...

Seized Domains Fight Back

Since last year, we’ve watched with dismay Immigration and Customs Enforcement's increasing use of domain name seizures as part of its stepped-up IP enforcement strategy. Today, one of the seized domains is taking the issue to court. Puerto 80, the Spanish company behind Rojadirecta.com and Rojadirecta.org...

The "PROTECT IP" Act: COICA Redux

Update: An official Senate version of the draft PROTECT IP Act has been released and is available here. This version changes the “interactive computer services” language mentioned in our post below to “information location tools,” a term that points back to section 512(d) of the Digital Millennium Copyright...

Pages

Back to top

JavaScript license information