3 ms·

We're talking about seeding a library full of copyrighted content. The person who made this site couldn't take 2 seconds to set up HTTPS? They're either incompe

We're talking about seeding a library full of copyrighted content. The person who made this site couldn't take 2 seconds to set up HTTPS? They're either incompetent or part of a honeypot. In either case, it's best to steer clear Keep in mind, the first post on this site was in 2022. 2022, and no https... is this some kind of joke? And in this case the adversary isn't necessarily the three letters, it's the copyright holders and legal system. No https makes ISP logs even more useful

capableweb 4y ago
Again, how does no HTTPS makes it more likely to be a honeypot than not? Everything on that website is about being a "pirate archivist", they don't even need to know what page you visited, just that you visited the domain, so the SNI and Host header already gives it away, TLS or not.
- hellfish 4y ago
  > so the SNI and Host header already gives it away, TLS or not Couldn't you just use ech/esni, ISP wouldn't see the domain only IP (and dns provider)?
  - NotEvil 4y ago
    We can't because nobody supports it. Only firefox has support for esni and it's behind an about:config