6 ms·
You do realise they are talking about static sites with no user private data?
by timc3 8y ago
You do realise they are talking about static sites with no user private data?
- cyphar 8y agoTLS provides other security properties than just confidentiality (not to mention that confidentiality can be useful even if the files are public and static), and inteionally MITMing your site will break those properties as well.
- ajnin 8y agoWhat if the static site is hosting some information banned in a specific country ? Simply accessing it might put a person at risk. I'm being very general here as you can find examples for practically anywhere.
- endorphone 8y agoTLS should be everywhere, whether private data or not. Any intermediary can be adulterating the payload otherwise, and we know that some carriers, routers, adware, etc, do.
- jedimastert 8y agoI keep forgetting that MITM attacks can work both ways. I need to keep it in the list on "why you should use HTTPS"
- gnode 8y agoWhat public data you access is in itself private data. Even if you don't care about your personal privacy, I think we should all care about the chilling effects of people not being afforded privacy to look at public information. That people can browse Wikipedia, and their ISP / government is prevented from knowing whether the article being read is about knitting or a political issue is a good thing.
- timc3 8y agoOk good point.