3 ms·
HTTPS is not a panacea. However, it does provide security advantages over HTTP, even when the communication itself does not have particularly sensitive content.
by organsnyder 12y ago
HTTPS is not a panacea. However, it does provide security advantages over HTTP, even when the communication itself does not have particularly sensitive content. While not impenetrable, HTTPS does provide a reasonable assurance (or at least a higher hurdle for an attacker) that the server is actually officially representing a particular domain.
Of course there are still issues. The certification process has plenty of flaws (such as the fact that an attack on a single one of the multitude trusted in most browsers is just as good as attacking all of them), and there are still other vectors (such as the mistyped URL example you provide). However, HTTPS still provides a clear—and increasingly low-cost—advantage over HTTP.