2 ms·
Or don't. It's not a problem that needs to be solved server-side.
by perryizgr8 5y ago
Or don't. It's not a problem that needs to be solved server-side.
- josephg 5y agoIt is a problem to solve over the wire, because we should assume at this point that bytes over the internet are monitored. Both in the east (Great Firewall of China) and the west (NSA + Snowden). I don't want my ISP or my government knowing which websites I'm visiting, what apps I open on my phone or, really anything else about me without a court order. Insecure-by-default is a bad default. To protect users, traffic over the internet should always be encrypted. Even if you don't care, as a user I care. And thankfully the people in charge of our software, protocols and ecosystem are slowly forcing the issue on our behalf: - Unencrypted http will eventually be deprecated from web browsers. (Newer browser features are already banned in insecure contexts). - iOS forbids applications from making unencrypted HTTP connections. - The IETF more or less requires new protocols to be secure. We'll see more of this over time. Its a good thing. Get on board.