3 ms·
> Not every web site needs HTTPS. Every site does. HTTPS should be the default, that increases security even if you're just looking at cat pictures in a given
by dale_glass 3y ago
> Not every web site needs HTTPS.
Every site does. HTTPS should be the default, that increases security even if you're just looking at cat pictures in a given context.
> It matters not at all if some government sees me checking the weather, or reading about the best seeds to plant this time of year.
Absolutely does. Much can be deduced from your activity, like whether you're home, what your interests are, who you talk to, what skills you have. If somebody gets poisoned, then your interest in botany might suddenly make you of interest.
For the most part nobody really wants to read your boring emails. But that you regularly talk to some controversial person, or spend a lot of time in their proximity, that's juicy information that may well paint a target on your back in the wrong circumstances.
> And 99 44/100% of the MITM hype is pure theoretical hysteria. There is a very long distance between "could" and "will" and "can" and "did."
Good news: it absolutely happens. MITM has been used for injecting ads in content, which of course can be used to nefarious effect. From just unethical, like replacing a site's original ads with your own and robbing them of the income, to actually malicious payloads.