3 ms·
Is anyone else really bothered that 2 sites advocating for "best practices" fail to use HTTPS? People are willing to write paragraphs arguing the technical meri
by tinalumfoil 11y ago
Is anyone else really bothered that 2 sites advocating for "best practices" fail to use HTTPS? People are willing to write paragraphs arguing the technical merits of subdomains but nobody could take 10 minutes to put their site behind CloudFlare?
- anonx 11y agoI'm using CloudFlare for GH Pages based web-sites with custom domains. However, Tor user in me says that's not really a "good practice". Looks like there isn't a way to turn off that annoying "Attention Required!" "One more step" checks, is there?
- couchfare 11y agoNot really. These are old sites build before CloudFlare even existed or the encrypt-ALL-the-traffic movement started. I myself prefer non-HTTPS over CloudFlare for sites like this. As for best practice: > Back in 2003, Lee Holloway and I started Project Honey Pot as an open-source project to track online fraud and abuse. The Project allowed anyone with a website to install a piece of code and track hackers and spammers. We ran it as a hobby and didn't think much about it until, in 2008, the Department of Homeland Security called and said, 'Do you have any idea how valuable the data you have is?' That started us thinking about how we could effectively deploy the data from Project Honey Pot, as well as other sources, in order to protect websites online. That turned into the initial impetus for CloudFlare. -- Matthew Prince, CloudFlare CEO