4 ms·

You want to deny me privacy because of, "Think of the children"? How about NO.

esaym 11y ago
I figured I'd get that response. How about this, what are you trying to be so "private" over? Is it legal or moral? Is it perhaps that web browsing and privacy are simply always going to be mutually exclusive, akin to walking out in public? I am sure everyone that went to ashleymadison.com used proxies, wiped their history, and used HTTPS. But HTTPS didn't really help all that much did it? And how many of your "private" websites that you use are vulnerable to the same? How do you know some sysadmin at Google isn't right now reading your gmail emails sitting on a backed up filesystem somewhere? I am trying to do something right here, protect my family and myself. Oh and make my internet faster. But because of a huge push of people that need to do (mostly) wrong, I can no longer do what is right. Yes I am aware that some privacy is probably good. Passwords shouldn't be clear text or CC numbers. But SSL for map images and random text from a news site? Just not seeing the point. Oh and HTTPS isn't the magic bullet either: https://youtu.be/WhKBPwzhAZ4?t=4m40s https://youtu.be/WhKBPwzhAZ4?t=4m40s
- pfg 11y ago
  Privacy isn't the only argument in favour of HTTPS everywhere. There's way too much unencrypted metadata even in a HTTPS connection - just the destination IP alone gives away a lot. The main argument for me is authenticity - no one between the web server and me can inject ads or malware.
- vacri 11y ago
  I thought that the "why hide if you have nothing to hide" argument was dead and buried when it came to privacy issues. > But because of a huge push of people that need to do (mostly) wrong, I can no longer do what is right This is just unspeakably wrong about the importance of HTTPS. You're basically equating HTTPS to criminal activity.
- viraptor 11y ago
  There are two reasons for me. First tech-related, second political. (main reasons anyway, there are more) 1. If you allow any website which has a login/payment/refer link to download over HTTP, you potentially lost the security game. It doesn't matter that the payment site is secure if the site that directed you to the shop was on plain HTTP and changed in flight. Making things secure by default is not solving everything, but definitely helps. 2. For keeping privacy, imagine you're doing 99% of your browsing via the default HTTP. Only connections to 1-2 servers ever go over HTTPS. Which are the connections you're trying to keep private? Now compare that to browsing 99% of the time via the default HTTPS. Which are the connections you're trying to keep private?
- vacri 11y ago
  > Oh and make my internet faster. Also, this site would disagree with you on the speed question: http://www.httpvshttps.com/ http://www.httpvshttps.com/
  - ticklemyelmo 11y ago
    That's really an HTTP vs. HTTP/2 comparison, with the deck stacked for HTTP/2 (hundreds of tiny files).
  - esaym 11y ago
    You missed my point. I am speaking of squid caching, which won't normally work with HTTPS.
fiatjaf 11y ago
People talk about "privacy" here in this abstract way (HTTPS provides no absolute privacy), and right now there is this: https://news.ycombinator.com/item?id=10711737 https://news.ycombinator.com/item?id=10711737 at the top of HN.

esaym 11y ago

I figured I'd get that response. How about this, what are you trying to be so "private" over? Is it legal or moral? Is it perhaps that web browsing and privacy are simply always going to be mutually exclusive, akin to walking out in public? I am sure everyone that went to ashleymadison.com used proxies, wiped their history, and used HTTPS. But HTTPS didn't really help all that much did it? And how many of your "private" websites that you use are vulnerable to the same? How do you know some sysadmin at Google isn't right now reading your gmail emails sitting on a backed up filesystem somewhere? I am trying to do something right here, protect my family and myself. Oh and make my internet faster. But because of a huge push of people that need to do (mostly) wrong, I can no longer do what is right. Yes I am aware that some privacy is probably good. Passwords shouldn't be clear text or CC numbers. But SSL for map images and random text from a news site? Just not seeing the point. Oh and HTTPS isn't the magic bullet either: https://youtu.be/WhKBPwzhAZ4?t=4m40s https://youtu.be/WhKBPwzhAZ4?t=4m40s

pfg 11y ago
Privacy isn't the only argument in favour of HTTPS everywhere. There's way too much unencrypted metadata even in a HTTPS connection - just the destination IP alone gives away a lot. The main argument for me is authenticity - no one between the web server and me can inject ads or malware.
vacri 11y ago
I thought that the "why hide if you have nothing to hide" argument was dead and buried when it came to privacy issues. > But because of a huge push of people that need to do (mostly) wrong, I can no longer do what is right This is just unspeakably wrong about the importance of HTTPS. You're basically equating HTTPS to criminal activity.
viraptor 11y ago
There are two reasons for me. First tech-related, second political. (main reasons anyway, there are more) 1. If you allow any website which has a login/payment/refer link to download over HTTP, you potentially lost the security game. It doesn't matter that the payment site is secure if the site that directed you to the shop was on plain HTTP and changed in flight. Making things secure by default is not solving everything, but definitely helps. 2. For keeping privacy, imagine you're doing 99% of your browsing via the default HTTP. Only connections to 1-2 servers ever go over HTTPS. Which are the connections you're trying to keep private? Now compare that to browsing 99% of the time via the default HTTPS. Which are the connections you're trying to keep private?
vacri 11y ago
> Oh and make my internet faster. Also, this site would disagree with you on the speed question: http://www.httpvshttps.com/ http://www.httpvshttps.com/
- ticklemyelmo 11y ago
  That's really an HTTP vs. HTTP/2 comparison, with the deck stacked for HTTP/2 (hundreds of tiny files).
- esaym 11y ago
  You missed my point. I am speaking of squid caching, which won't normally work with HTTPS.

fiatjaf 11y ago

People talk about "privacy" here in this abstract way (HTTPS provides no absolute privacy), and right now there is this: https://news.ycombinator.com/item?id=10711737 https://news.ycombinator.com/item?id=10711737 at the top of HN.