3 ms·
> That is a broken assumption Why is that a broken assumption? Can you name a legitimate reason for HTTP and HTTPS sites to serve separate contents and audienc
by lukeramsden 6y ago
> That is a broken assumption
Why is that a broken assumption? Can you name a legitimate reason for HTTP and HTTPS sites to serve separate contents and audiences? I would rather not connect over HTTP to _anything_ nowadays.
- corty 6y agoCMS, serve the content over http and the admin page over https. And for sites with noncritical static content https is superfluous to dangerous. ESNI isn't implemented yet, IP addresses are still visible to the eyes. And content sizes and timing are a dead giveaway for the things you are looking at. HTTPS for everything is just a simulation of privacy at best, and misleading and dangerous at worst, because there IS NO PRIVACY in the aforementioned cases.