> Sorry, but there's really no reason to force HTTPS on static webpages... I downvoted you because this is wrong. There are at least two good reasons for it:

> Sorry, but there's really no reason to force HTTPS on static webpages... I downvoted you because this is wrong. There are at least two good reasons for it: 1. It prevents MitM attacks. For example, some ISPs and free WiFi APs inject arbitrary code into unencrypted pages. 2. It improves privacy by hiding the request headers, including hostname.