top | item 17092487

(no title)

khamoud | 7 years ago

Nit: the site should be serving all of its assets over https.

discuss

order

nikanj|7 years ago

Otherwise someone could eavesdrop this publicly available material, or MITM the content for the benefit of...why?

This new https craze is like demanding seals of authenticity from posters on lamp posts.

Sylos|7 years ago

They could inject malicious code or even just ads into those http assets and therefore compromise the https connection.

I also don't necessarily think that we need https for everything, but it's better to err on the safe side and if you're gonna start doing it, then you should do it properly.