top | item 27197190

(no title)

caseyscottmckay | 4 years ago

Does it need it? All the site does is show you text.

discuss

Sohcahtoa82|4 years ago

Yes, static sites still need HTTPS. Troy Hunt explains it well:

https://www.troyhunt.com/heres-why-your-static-website-needs...

dvfjsdhgfv|4 years ago

N-gate has done a good job of debunking these arguments (google for "Discourse on HTTPS n-gate").

netflixandkill|4 years ago

I used to be of this opinion but enough ISPs and other intermediaries will happily MITM http (and DNS) if they can to inject ads or redirects to affiliates.

With modern hardware and letsencrypt, getting SSL going is about close to free and less effort than what most "just text" sites do for their content.

wayneftw|4 years ago

One thing that I don't like about unsecure sites is that, depending on the ISP or Wifi access point, they might inject things into the stream.

unknown|4 years ago

[deleted]

halfdan|4 years ago

Yes, because not having it will still leave your browsing on that site succeptible to MITM attacks.

_6mdd|4 years ago

>Does it need it?

Yes. It's that simple.