4 ms·
Probably the most common reason to use TLS is to check a box on a list of compliance rules. Is that bad?
by pocksuppet 5mo ago
Probably the most common reason to use TLS is to check a box on a list of compliance rules. Is that bad?
- liveoneggs 5mo agobrowsers pushed it, not compliance
- weird-eye-issue 5mo agoDo browsers even load non-HTTPS sites anymore without a massive warning?
- pocksuppet 5mo agoYes, they do.
- weird-eye-issue 5mo agoYeah just ignore the big "not secure" warning in the URL bar
- pocksuppet 5mo agoI just checked it. You mean the very small open padlock icon? The era of browsers warning loudly about HTTP was a decade ago, it got reversed due to pushback.
- weird-eye-issue 5mo agoWell I checked both Chrome and Firefox on mobile and my desktop and they were all much more obvious than just an "open padlock". They both said "Not Secure" and in Firefox it was bright red text. Also in incognito mode Chrome refused to even open the site without a full screen warning. They all make it super clear non-HTTPS sites are not secure so I'm not really sure what your point is?
- red_admiral 5mo agoneverssl.com works fine for me, only a small warning in the place where the padlock usually is, that no-one checks anyway. The browser would be very unhappy with an <input type="password"/> on a non-TLS site (localhost excepted). HSTS would trigger the "massive" warning and refuse to load the site, however.
- weird-eye-issue 5mo agoIt's more pronounced on desktop Ah yes I think the HSTS issue is what I was thinking of