105 ms·

Article isn't paywalled. Did not need me to login/register. They did not ask me for my email. Don't care about http/https. Should I ?

• someguy101010 8y ago
  If you are on a public internet connection you should. I could theoretically replace the content of that page with whatever I want. A crypto currency miner, some zero day JavaScript exploit that will download a key logger on your computer etc. Https helps to mitigate these sort of man in the middle attacks, even on static content.
  • rand_r 8y ago
    I'm on a public internet connection, but I'm not too worried because to perform such an attack, you would have to compromise some physical network infrastructure between me and sciencemag.org, and do it in a such a way to not get yourself in trouble with the law. It's possible sure, but it seems difficult enough to not worry about.
    • someguy101010 8y ago
      You don't even have to go that far, it's usually done between you and the router.
    • fjsolwmv 8y ago
      It's easy for an attacker on your WiFi network, in some cases. Your WiFi network might be encrypted, which might be a broken encryption, or might be unencrypted to discourage excessive use.