4 ms·
To be honest, even before Let's Encrypt I could buy a PositivesSSL from namecheap for about $10 a year, and set it up with Apache or Nginx in about 20-30 mins.
by dannyw 7y ago
To be honest, even before Let's Encrypt I could buy a PositivesSSL from namecheap for about $10 a year, and set it up with Apache or Nginx in about 20-30 mins. Had to renew every X years which was annoying, but cmon. There were step by step tutorials.
Now, with Let's Encrypt, there's no excuse to not SSL.
- cutler 7y agoBut on static sites ... why? I'm not arguing against HTTPS/SSL where it makes sense, just the way it's been imposed indiscriminately on the whole damned www.
- dannyw 7y agoBecause a hostile MITM agent can deliver exploit code by MITMing your static site. Even if your site is some static video game guide for Club Penguin, an attacker can inject some 0day, some privacy-invading analytics code, or even a dumb alert("Your windows is out of date").