4 ms·
I was about to comment on the same... my only question to the OP (and other's who don't enforce HTTPS) is "why?!"
by cojant 4y ago
I was about to comment on the same... my only question to the OP (and other's who don't enforce HTTPS) is "why?!"
- mcsniff 4y agoWhy does a personal blog page need HTTPS? It's an output page, I read the contents and leave, I'm never submitting any of my information across the wire. Someone along the way might modify the page? Unless they're using HSTS, it won't matter. I'm all for encryption, but I'm also all for using tools when necessary, and not complicating things when not.
- iamjkt 4y agotroyhunt answers this very question: https://www.troyhunt.com/heres-why-your-static-website-needs-https/ https://www.troyhunt.com/heres-why-your-static-website-needs...
- yamtaddle 4y agoIt's an answer, but I still find it entirely unconvincing for a static personal blog. Better? Sure. Necessary? Damning if it's absent? No.
- fmajid 4y agoYou'd be surprised how many top websites (e.g. Amazon, eBay) don't even implement HSTS, let alone HSTS Preload. Here's some naming-and-shaming: https://blog.majid.info/hsts-preload/ https://blog.majid.info/hsts-preload/
- zamnos 4y agoHSTS is a commitment to future downtime for your site, and as such, is not recommended if you care about uptime for your site (like, say, Amazon.com might).