3 ms·

I don't understand why sites like this are not HTTPS, yet. I'm not giving you a security exception to read your blog. Let's Encrypt is free.

pessimizer 4y ago
I don't understand why they would be, in general. The content isn't interesting for snoops. I supposed it could screw you if you had an elaborate Murder She Wrote plan to kill someone that relied on a math trick, and visiting this particular page was enough for the jury to convict.
- School-Cotton 4y ago
  It’s not only about privacy, it’s also about the ability for shady public wifi endpoints to inject ads or malware.
  - nayuki 4y ago
    Yup. I was at Atlanta airport and clicked on a bunch of links from the HN front page. All the pages that were sent over unencrypted HTTP got invasive ads injected into them. All the pages over HTTPS were fine.
  - pessimizer 4y ago
    It's good for everybody to use ssl, but people writing essays about their hobbies aren't responsible for shady public wifi endpoints. At least in FF there's a setting to force you to click through a full page warning to enable visiting a site without ssl. I use it, so I can be aware of my risks.
    - School-Cotton 4y ago
      They’re not “responsible” in the sense that I don’t think it’s not some kind of moral failing. I’m just pointing out that it’s not true that having TLS on this site wouldn’t be useful to anyone. It would, and the webmaster enabling, despite not required, would be appreciated.
Wowfunhappy 4y ago
> Let's Encrypt is free. Free of financial cost perhaps, but not free of effort. Let's Encrypt is a pain to set up and maintain on a self-hosted website, if you don't maintain websites professionally and don't have experience. People lament the centralization of the web, but this https-or-the-highway mantra is contributing to exactly that! Because there is a way to truly get https "for free", and it's to throw up your site on Github Pages or Squarespace. Or just use Facebook.

pessimizer 4y ago

I don't understand why they would be, in general. The content isn't interesting for snoops. I supposed it could screw you if you had an elaborate Murder She Wrote plan to kill someone that relied on a math trick, and visiting this particular page was enough for the jury to convict.

School-Cotton 4y ago
It’s not only about privacy, it’s also about the ability for shady public wifi endpoints to inject ads or malware.
- nayuki 4y ago
  Yup. I was at Atlanta airport and clicked on a bunch of links from the HN front page. All the pages that were sent over unencrypted HTTP got invasive ads injected into them. All the pages over HTTPS were fine.
- pessimizer 4y ago
  It's good for everybody to use ssl, but people writing essays about their hobbies aren't responsible for shady public wifi endpoints. At least in FF there's a setting to force you to click through a full page warning to enable visiting a site without ssl. I use it, so I can be aware of my risks.
  - School-Cotton 4y ago
    They’re not “responsible” in the sense that I don’t think it’s not some kind of moral failing. I’m just pointing out that it’s not true that having TLS on this site wouldn’t be useful to anyone. It would, and the webmaster enabling, despite not required, would be appreciated.

Wowfunhappy 4y ago

> Let's Encrypt is free. Free of financial cost perhaps, but not free of effort. Let's Encrypt is a pain to set up and maintain on a self-hosted website, if you don't maintain websites professionally and don't have experience. People lament the centralization of the web, but this https-or-the-highway mantra is contributing to exactly that! Because there is a way to truly get https "for free", and it's to throw up your site on Github Pages or Squarespace. Or just use Facebook.