4 ms·

Thank you for saying that. I always thought HTTPS was only for private communication or logged sessions. Reading random stuff on news sites shouldn't be HTTPS'e

by fiatjaf 11y ago

Thank you for saying that. I always thought HTTPS was only for private communication or logged sessions. Reading random stuff on news sites shouldn't be HTTPS'ed, it has too many downsides and no upside in these cases. However, HTTP/2 is here, and it is HTTPS only. The dream is over. We're lucky -- only lucky -- that someone decided to do Let's Encrypt so I can still run a personal website without paying thousands on certificates.

viraptor 11y ago
It's not like HTTP/1.1 is going anywhere for decades. HTTP/2 barely arrived and has benefits mainly for large sites, not everyone.
mei0Iesh 11y ago
Paying thousands? It's $5 or less per year for a certificate like the one Let's Encrypt provides at other sites.
esaym 11y ago
Interesting. I'd never thought about the potential issues with HTTP/2 being only HTTPS based. Though seems that self signed certs could still be used or is that disallowed?