4 ms·
Well I mean it's my personal blog, there's really no need for https since there's no user accounts or login. Are you saying HN is insecure because they don't us
by RyanKearney 15y ago
Well I mean it's my personal blog, there's really no need for https since there's no user accounts or login. Are you saying HN is insecure because they don't use https? How about Reddit, no https there either.
- wladimir 15y agoYes, HN is insecure because they don't use HTTPS. Especially when using a public WiFi network someone could hijack my session, and even intercept my password by passively sniffing packets. There is a HTTPS wrapper around HN, but it has been pretty flakey lately (lots of timeouts): https://quickhn.appspot.com/news https://quickhn.appspot.com/news I do agree that if you don't have user logins there is no real threat. The only possible 'attack' then would be an ISP injecting ads or injecting other content that you didn't write :)