I like this post as I run a simple, personal blog and don’t care about tls/https (my isp does it for me automagically so it’s less of an issue for me). I get q

I like this post as I run a simple, personal blog and don’t care about tls/https (my isp does it for me automagically so it’s less of an issue for me). I get questions about why don’t I require or default to tls and I’ll point those folks to this post to explain my reasons. I don’t like pointless security and, as a developer, get annoyed by many “security” requirements that just seem to increase complexity without any tangible benefits. Yes, there is some benefit, but it’s not much. As the author says, MITM and isp snooping isn’t really applicable to simple web blogs. So who cares about protecting the content. It’s like protecting against Martian attackers. Yes, it’s nice to be safe from Martian attackers but not worth a penny or second of time.