I worked with storage arrays at a service firm. The storage arrays backed up to the cloud. They had an onboard proprietary GUI, where if you checked a single bo

I worked with storage arrays at a service firm. The storage arrays backed up to the cloud. They had an onboard proprietary GUI, where if you checked a single box, it would use HTTPS instead of HTTP when transmitting to S3 (no idea why S3 even allows HTTP to start with). They refused to roll this out (HTTPS) across the 4-5 servers of this brand we managed. Something just broke in their brain, because I was coming at it from a security angle, they thought “this must be a waste of time / I am a power-hungry sysadmin resistant to change”. I still think about it to this day, and will get anxiety every now and then suggesting a mildly taxing security fix, because if ppl can say no to HTTPS checkboxes will they agree to anything?