3 ms·
This, a thousand times. No one is going to mitm someone browsing my text blog. On the other hand, https creates many barriers to access, including recent versio
by forgotmypw17 6y ago
This, a thousand times. No one is going to mitm someone browsing my text blog. On the other hand, https creates many barriers to access, including recent version requirement, time sync, and extra cpu and bandwidth.
- tpxl 6y agoISPs regularly MITM http websites to inject ads (in the US even).
- forgotmypw17 6y agoIt happens. I think I'd rather my site be served with ads, than not at all. It would be great if we could always automatically choose the right option, but browsers don't do that.
- tpxl 6y agoAds aren't that much of a problem, but serving cryptominers/phishing websites/viruses is a real issue.
- forgotmypw17 6y agoDo ISPs really do that?
- tpxl 6y agoI haven't heard of it, but other malicious actors surely do.
- cutler 6y agoNot to mention single points of failure like Letsencrypt.