4 ms·
Maybe it should be called it Https observatory? I run http only site, I installed everything from scratch and minimized all attack surfaces. I got F because I'
by quickben 10y ago
Maybe it should be called it Https observatory?
I run http only site, I installed everything from scratch and minimized all attack surfaces. I got F because I'm lacking https stuff.
But maybe I'm missing something. If you don't deal with user logins and no sessions. Do I need to get https?
Or is this site just assuming things?
- rmdoss 10y agoYep, agree 100% very short sighted view of security. Their grades doesn't mean anything, other than confuse people thinking they are secure.
- jvehent 10y agoYou need https to guarantee data in transit is not being modified between your server and web clients. ISPs, for instance, have a bad tendency to inject tracking cookies in http traffic.
- quickben 10y agoAhhh. Okay. Thanks.
- majewsky 10y agoIt's 2016. There's just no excuse anymore not to do TLS.
- deleted 10y ago[deleted]