3 ms·
HTTP + HTTPS is fine HTTPS for SaaS and e-commerce web apps is fine HTTP for normal websites is okay (for me, I have no hidden agenda) HTTPS-only for normal
by frik 11y ago
HTTP + HTTPS is fine
HTTPS for SaaS and e-commerce web apps is fine
HTTP for normal websites is okay (for me, I have no hidden agenda)
HTTPS-only for normal websites is silly, why not offer HTTP too? Every request is unique, no internet anonymity.
- jve 11y agoHTTP for normal websites may allow your website visitors to participate in DDoS: https://blog.cloudflare.com/an-introduction-to-javascript-based-ddos/ https://blog.cloudflare.com/an-introduction-to-javascript-ba... Happened to GitHub once.
- agildehaus 11y agoWhy is HTTPS-only for normal websites silly? It ensures the page was not tampered with enroute.
- frik 11y agoWhy not HTTP + HTTPS? Let the user decide. HTTPS-only is silly for normal websites. Visitors from cooperate networks or some countries would say, your second sentense doesn't hold in the real world.