4 ms·
Note to self: keep using HTTP, and provide HTTPS for important website content (like shop payment) and use a SSL/TLS Cert that lasts 1 year.
by frik 10y ago
Note to self: keep using HTTP, and provide HTTPS for important website content (like shop payment) and use a SSL/TLS Cert that lasts 1 year.
- wlll 10y ago> keep using HTTP, and provide HTTPS for important website content (like shop payment) What if someone MITM's your site, injects some code so that when the user clicks on the checkout link/button they get sent to a malicious site?
- frik 10y agoHave you asked Amazon the same question? It works fine for them since 1994.
- pfg 10y agoAmazon has deployed HTTPS across all their sites a couple of weeks ago.
- frik 10y agoYes, just last week. And parts of site were down too for some hours. Is MITM something new? No. What is the point? Amazon worked fine since 1994/95. The whole HTTPS-only movement looks very orchestrated.
- wlll 10y agoHTTPS everywhere is a good thing, and if you don't understand why that's fine, I don't have the time to explain to you why you are wrong, but you are. Good luck deploying Internet connected services in the past.
- frik 10y agoThe difference is I understand the Pro and Cons. That's why HTTP and HTTPS is often better.