2 ms·
Our HTTPS overlords have much to answer for. How many static sites, for example, really need HTTPS and the non-trivial maintenance involved in the average Apach
by cutler 7y ago
Our HTTPS overlords have much to answer for. How many static sites, for example, really need HTTPS and the non-trivial maintenance involved in the average Apache/Letsencrypt/certbot setup? Talk about sledge-hammer to crack a nut. And renewals every 3 months?! Don't get me started. Sure, the likes of Microsoft should be able to do better but isn't there a message here? Beyond secure sites such as finance, government, logins and ecommerce the whole HTTPS certificate nonesense is a giant burden/cost with no benefit.
- tatersolid 7y ago> How many static sites, for example, really need HTTPS All of them. Script jacking, ad insertion, redirection, tracking insertion, etc. are all done at scale by everything from national ISPs to coffe shop routers. HTTPS provides authenticity of all transmitted data; this is more important than confidentiality because without authenticity you can’t tell that you are talking in secret with an atttacker.