4 ms·
Unfortunately by this point is a losing battle, most techies have been conditioned to believe that serving unencrypted raw HTML, HTML which contains no confiden
by paganel 3y ago
Unfortunately by this point is a losing battle, most techies have been conditioned to believe that serving unencrypted raw HTML, HTML which contains no confidential information in it, might as well make the Dark Forces of Evil win. "What if someone MITM-es your recipes blog?".
Of course, it just happens that this let's encrypt push puts even more power in the hands of Google, the owner of Chrome. I would have said something about that, too, but yesterday someone re-posted the HN guidelines and I'm not up for another fight with Google engineers comp-ed 600k and up, engineers who are very eager to anonymously defend their employer online.
- TYMorningCoffee 3y ago> "What if someone MITM-es your recipes blog?" You can alter the ingredients to be lethal.
- brohee 3y agoConfidentiality isn't the only thing TLS safeguards. Integrity is a big one too. Some ISPs were injecting ads in all sites, sometime breaking them in the process. TLS put an end to it.