3 ms·

Uh, for something touting e2e encryption and security it would be better if the site did not serve over plain http by default

• progre 7y ago
  https adds nothing to a page when the only trafic is server -> client
  • seemslegit 7y ago
    Of course it does, HTTP is never only server -> client - from preventing a passive eavesdropper from seeing what pages are being browsed on the server, cookies, UA fingerprinting etc. to active content modification in transit.
    • progre 7y ago
      Pages are still visable in the tls handshake, no coockies on this page (that would be client-> server traffic). But yeah, good point about the fingerprinting and content modification
      • seemslegit 7y ago
        No, they aren't - just the hostname (domain name).