14 ms·
Paulgraham.com doesn't use SSL Certificate?
- caseyscottmckay 5y agoDoes it need it? All the site does is show you text.
- wayneftw 5y agoOne thing that I don't like about unsecure sites is that, depending on the ISP or Wifi access point, they might inject things into the stream.
- deleted 5y ago[deleted]
- halfdan 5y agoYes, because not having it will still leave your browsing on that site succeptible to MITM attacks.
- netflixandkill 5y agoI used to be of this opinion but enough ISPs and other intermediaries will happily MITM http (and DNS) if they can to inject ads or redirects to affiliates. With modern hardware and letsencrypt, getting SSL going is about close to free and less effort than what most "just text" sites do for their content.
- Sohcahtoa82 5y agoYes, static sites still need HTTPS. Troy Hunt explains it well: https://www.troyhunt.com/heres-why-your-static-website-needs-https/ https://www.troyhunt.com/heres-why-your-static-website-needs...
- dvfjsdhgfv 5y agoN-gate has done a good job of debunking these arguments (google for "Discourse on HTTPS n-gate").
- diogenesjunior 5y ago>Does it need it? Yes. It's that simple.
- adydaddy 5y agoThen why investor due diligence teams ask for ssl , policies around SSL, if this is not important?
- mattmanser 5y agoProtecting form data, ajax, etc which the site doesn't really have. SSL can also stop your ISP infecting content, but if they're doing that you've got a crap ISP.
- adydaddy 5y agoIt is supposedly integrated with Yahoo store although defunct and has a search text box as well.
- adydaddy 5y agoBest practice starts from home it not only for folks who need money but for folks who give money as well.l.llll
- thesimon 5y agoNo https://crt.sh/?q=paulgraham.com https://crt.sh/?q=paulgraham.com
- benmmurphy 5y agoit looks like it is vhosted with store.yahoo.com his site is probably only meant to serve HTTP but gets HTTPS with the wrong cert because of the vhosting of the other site.
- Nicksil 5y agoAsk HN: Why Isn't Paulgraham.com on HTTPS? https://news.ycombinator.com/item?id=25214264 https://news.ycombinator.com/item?id=25214264 Paul Graham still does not offer HTTPS on his site https://news.ycombinator.com/item?id=23059825 https://news.ycombinator.com/item?id=23059825 Ask HN: Why Doesn't Paul Graham Get a SSL Certificate? https://news.ycombinator.com/item?id=24351945 https://news.ycombinator.com/item?id=24351945 Why doesn't pg use HTTPS on his site? https://news.ycombinator.com/item?id=27065639 https://news.ycombinator.com/item?id=27065639
- adychandra 5y agoumm interesting. reading threads nick you have shared.
- adychandra 5y agobut still my only submission is that if SSL is one of criteria;s in all Due dils, then how it would be difficult to add one PG;s site? or why to make such a big fuss around it?
- dmingod666 5y agoCan't access on the phone, chrome shows a safety screen (probably can bypass it)
- diogenesjunior 5y agoOf course it gets flagged
- fnax 5y agoWhy should the site use SSL? http://n-gate.com/software/2017/ http://n-gate.com/software/2017/