4 ms·
But on static sites ... why? I'm not arguing against HTTPS/SSL where it makes sense, just the way it's been imposed indiscriminately on the whole damned www.
by cutler 7y ago
But on static sites ... why? I'm not arguing against HTTPS/SSL where it makes sense, just the way it's been imposed indiscriminately on the whole damned www.
- dannyw 7y agoBecause a hostile MITM agent can deliver exploit code by MITMing your static site. Even if your site is some static video game guide for Club Penguin, an attacker can inject some 0day, some privacy-invading analytics code, or even a dumb alert("Your windows is out of date").