5 ms·
does anyone know why libgen is still running over http? (But sincerely thanks for the site! it saved me on several occasions!)
by MichaelMoser123 6y ago
does anyone know why libgen is still running over http? (But sincerely thanks for the site! it saved me on several occasions!)
- warmwaffles 6y agoProbably because they don't care enough to add https.
- generationP 6y agoThey don't want the extra weak spot of certificate revocation being abused against them? Though I'm not sure how big of an issue this is; sci-hub is using https.
- jdu9 6y agoUnless they activate HSTS, it shouldn't be a problem. They can always go back to HTTP if they want. Also, Let's Encrypt doesn't even revoke certificates for malware and phishing sites. [1] Maybe they're doing this for better caching performance? It makes SSL flood attacks impossible, but is that really worth it? [1] https://community.letsencrypt.org/t/how-to-report-abuse/41106/4 https://community.letsencrypt.org/t/how-to-report-abuse/4110...
- dublinben 6y agoOne of the new IPFS-backed mirror sites (https://libgen.fun/ https://libgen.fun/) is on HTTPS.
- MichaelMoser123 6y agoGreat, however it currently doesnt have the sci-tech filter, and no comics filter too :-(
- givepause 6y agoscitech is there, it's relabeled "Educational." comics is not a public dataset -- it's privately run and managed, so there are no mirrors for it. I guess someone could scrape it.
- MichaelMoser123 6y agothanks!
- givepause 6y agoI have heard that certain countries ISPs break HTTPS, that might be one reason. It's hard to believe, but it's certainly happened/happening -- plenty of democratic countries are filtering the internet, like Turkey.