4 ms·
I feel like if they're going to force https on .dev domains they should just bundle certs with the domain itself. I like https as much as the next guy but it's
by opportune 8y ago
I feel like if they're going to force https on .dev domains they should just bundle certs with the domain itself. I like https as much as the next guy but it's simply not necessary in many types of websites (e.g. a website with documentation and third party binary links), and they're not making it as painless as it could be to comply with their own rules
- whatshisface 8y ago>it's simply not necessary in many types of websites (e.g. a website with documentation and third party binary links) I see debates about HTTPS as being a bit like debates about wearing pants in public. "Technically, if a subway station is empty and the AC is working, you don't have to wear pants." "You don't gain anything by wearing pants in a deserted forest when the weather is nice." "Wearing pants is a lot of work, and every day before putting them on I check to make absolutely sure that I will suffer dire consequences if I leave them off." In all of these cases, you are betting big that none of the situations will go sideways for unexpected reasons (how sure are you that you have thought of 100% of the ways in which going pants-less in a subway station could get you in trouble, and how sure are you that none of them will happen?), but the reward for taking on that risk is almost nothing.
- 18pfsmt 8y agoI take your point, but to be fair, there is a cost to me for thinking in this way where I better consider every possible action I take being offensive. I have no malicious bone in my body, but I am certainly callous at times (unintentionally).