3 ms·
If you're unfamiliar with the nuances of good development practices or basic security, this is an obvious thing to do. It lets you iterate and work on it until
by Kalium 4y ago
If you're unfamiliar with the nuances of good development practices or basic security, this is an obvious thing to do. It lets you iterate and work on it until you're ready.
It doesn't even occur to a lot of people that this might be a bad idea. Salespeople, marketing, a sole prop, or someone who wants to set up a blog are all people who would have absolutely no idea how to do this right... and no clue that they're doing it wrong.
- snowwrestler 4y agoOk sure, but these are also somehow people who are requesting and installing TLS certs? I’m just flummoxed trying to imagine a person who can install and run certbot, but doesn’t know how to (or think to) configure locally, or even set a basic HTTP password on the site until WP is configured.
- Kalium 4y agoYes, because that's the sort of thing that's easily automated and can be done for you by a setup script. Or by following a stepwise tutorial. People don't have to understand what they're doing to use a tool. Sometimes, like this time, there can be drawbacks to this.