5 ms·

I assume if the owner of the site wanted to redirect all http->https traffic they would do so.

• ddtaylor 7y ago
  Doing that doesn't actually solve the problem though. A MITM attacker still gets to read and modify all that content.
  • bayarrhea 7y ago
    It’s true. Why, just as I was loading the page, someone replaced all instances of “filesystem” with “butt”! The nerve!
    • deleted 7y ago
      [deleted]
    • adrianN 7y ago
      Well they could replace the website with something that makes you part of a botnet. Like so https://news.ycombinator.com/item?id=21721843 https://news.ycombinator.com/item?id=21721843
  • tyingq 7y ago
    I don't believe blogspot allows you to turn off http, just (optionally) redirect it to https.