6 ms·
I actually sent him a cold e-mail in Nov/2020 on that matter to which he promptly replied (in less than 1h) that his site "just doesn't have https". So he's awa
by tcgv 5y ago
I actually sent him a cold e-mail in Nov/2020 on that matter to which he promptly replied (in less than 1h) that his site "just doesn't have https". So he's aware of that. IMHO it'd be a small effort for improving his readers experience (and security).
- gambiting 5y agoI'm genuinely curious - how? On both of these points. It's just a simple text page, why would this ever need https at all?
- LgWoodenBadger 5y agoHow do you know what you read is actually what pg wrote?
- gambiting 5y agoI don't know, how do you know someone hasn't hacked into his server and changed the text there even if he had HTTPS? There are things to worry about, and there is a simple text blog not using HTTPS.
- tcgv 5y agoIt's much easier to intercept and tamper with non encrypted network communication than to hack into a server.
- tcgv 5y agoTwo things, first readers wouldn't receive that browser security warning (which is a bad experience) and second the transmitted content wouldn't be vulnerable to manipulation (such as ISPs injecting adds or attackers trying to deceive you).