3 ms·
It's beneficial for all the other sites if non-secret data is TLS-encrypted, though. If I want to ban secrets, and HTTPS is only used for secrets, I can just ba
by wizzwizz4 3y ago
It's beneficial for all the other sites if non-secret data is TLS-encrypted, though. If I want to ban secrets, and HTTPS is only used for secrets, I can just ban TLS; but if HTTPS is used for most of the web, I have to ban most of the web (and such a ban will never last long).
Additionally, metadata such as browser history can reasonably be considered a secret: TLS helps protect that somewhat.