3 ms·

I think it's a jab at how AROS's site doesn't offer HTTPS. Personally I don't understand why some people are so bothered by this, but I guess conversely it's re

I think it's a jab at how AROS's site doesn't offer HTTPS. Personally I don't understand why some people are so bothered by this, but I guess conversely it's really easy to add letsencrypt to about anything nowadays...

yjftsjthsd-h 6y ago
Two obvious points where leaving it unencrypted is a problem: 1. downloads - which is mostly mitigated by not actually having software downloads on their own site, although of course now the links are subvertable, and 2. they have a paypal donation form on http://www.aros.org/download.php http://www.aros.org/download.php - I assume that clicking into that sends you to the real paypal page, so at least they're not sending credit card details in the clear, but again leaves them open to a nice little tweak to change where the money goes.