3 ms·

Do you want ISPs to inject random crap at the top of your website? Because that's how you get ISPs to inject random crap at the top of your website. I remember

Do you want ISPs to inject random crap at the top of your website? Because that's how you get ISPs to inject random crap at the top of your website. I remember getting a Vodaphone sim card (I think it was in Belgium or The Netherlands) and seeing their banner displayed on MY WEBSITE! It wasn't in a language I know, and it might have just been a bandwidth warning or something to indicate I need to reload, but it was still on my website, injected right in there. HTTP is needed for static sites, if you want to ensure your readers see the exact same site that you made.

oefrha 7y ago
A few years back I used to not redirect http:// http:// to https:// https:// on my personal site. Then one day at an airport or something I somehow visited the http:// http:// variant. Bam, a pop-up ad in my face. I set up redirect and HSTS asap.
arm64future 7y ago
>Do you want ISPs to inject random crap at the top of your website? If your ISP does this, or if you are on a sketchy network somewhere, then maybe you should not use it at all. Get a new ISP, or use a VPN if you are that worried. If the webmaster is not sharing sensitive information on his casually maintained static website, then that is good enough reason not to use HTTPS. I know it sounds... uncaring. It is true ordinary people, who don't understand the risks could get MITM'd and never suspect a thing. For some reason I still don't care enough to put HTTPS on my shitty old flash game website. I just can't be bothered. I think that is good enough of a reason. Blame should go on the ISP who are MITM'ing their customers.
- rahuldottech 7y ago
  Sure, but when the biggest (or only) ISPs in many countries are doing it, and you can prevent it by taking out 15 minutes to set up Let's Encrypt, that's on you.
  - arm64future 7y ago
    Nope. They can get a VPN, or fight against their big ISP or government to stop such dubious practices. Your point of view seems to come from a standpoint of infantilization of these users.
    - rahuldottech 7y ago
      You expect that from the vast majority of the population which is not tech-savvy?
      - wolco 7y ago
        I expect the vast majority to complain if their internet provider is putting ads into website. The bigger the company the bigger the group.
wolco 7y ago
In fairness, it's your isp that you pay for that is doing this. Asking every website to change to prevent this instead of talking to your isp and changing providers if necessary doesn't sounds like the right people are taking responsibilities. Don't trust random sim cards you buy off of the street either.

oefrha 7y ago

A few years back I used to not redirect http:// http:// to https:// https:// on my personal site. Then one day at an airport or something I somehow visited the http:// http:// variant. Bam, a pop-up ad in my face. I set up redirect and HSTS asap.

arm64future 7y ago

>Do you want ISPs to inject random crap at the top of your website? If your ISP does this, or if you are on a sketchy network somewhere, then maybe you should not use it at all. Get a new ISP, or use a VPN if you are that worried. If the webmaster is not sharing sensitive information on his casually maintained static website, then that is good enough reason not to use HTTPS. I know it sounds... uncaring. It is true ordinary people, who don't understand the risks could get MITM'd and never suspect a thing. For some reason I still don't care enough to put HTTPS on my shitty old flash game website. I just can't be bothered. I think that is good enough of a reason. Blame should go on the ISP who are MITM'ing their customers.

rahuldottech 7y ago
Sure, but when the biggest (or only) ISPs in many countries are doing it, and you can prevent it by taking out 15 minutes to set up Let's Encrypt, that's on you.
- arm64future 7y ago
  Nope. They can get a VPN, or fight against their big ISP or government to stop such dubious practices. Your point of view seems to come from a standpoint of infantilization of these users.
  - rahuldottech 7y ago
    You expect that from the vast majority of the population which is not tech-savvy?
    - wolco 7y ago
      I expect the vast majority to complain if their internet provider is putting ads into website. The bigger the company the bigger the group.

wolco 7y ago

In fairness, it's your isp that you pay for that is doing this. Asking every website to change to prevent this instead of talking to your isp and changing providers if necessary doesn't sounds like the right people are taking responsibilities. Don't trust random sim cards you buy off of the street either.