4 ms·

Get an SSL cert! HTTP only is sadge

• nvr219 4y ago
  what is someone gonna deface the site? how are you gonna tell?
  • raydiatian 4y ago
    Sometimes you can’t tell if the ”artist” is into “graffiti” or “vandalism”. Or maybe just vandegraaf generators.
  • andrewflnr 4y ago
    Among other threat models, someone on your network shotgun-injecting malicious JavaScript. Hotels have been known to do basically that to inject ads.
  • MauranKilom 4y ago
    Non-HTTPS doesn't mean "an attacker can modify how the website looks", it means "an attacker can server whatever the heck they want". Ads, malicious JS, or a PDF with a payload that pwns your machine... Neither you nor the "real" server are in control without encryption, a MITM can do anything.