4 ms·
Probably fear of content injection (eg a third party on shared wifi injecting a pdf with a zero day exploit, or just some malicious Javascript).
by e12e 8y ago
Probably fear of content injection (eg a third party on shared wifi injecting a pdf with a zero day exploit, or just some malicious Javascript).
- godelski 8y agoMore of a principle thing. SSL is easy to enable and the whole web should be encrypted. I fully support all the major browsers' decision to warn users about sites that aren't https (even without login). It doesn't feel like there's a good excuse to not have https enabled.