4 ms·
As the name implies, this only works for subresources (scripts, stylesheets, images, etc.) and is mainly useful for cross origin requests. HTTPS on the other h
by realityking 11y ago
As the name implies, this only works for subresources (scripts, stylesheets, images, etc.) and is mainly useful for cross origin requests.
HTTPS on the other hand also gurantees that the article I'm reading hasn't been modified. And that no one has injected ads into the site.
- Animats 11y agoIf you're using a CDN, you don't know if the CDN has injected ads or spyware. If you use Cloudflare's RocketLoader, what the user gets is not what you sent. Once a CDN is involved in "HTTPS Everywhere", it's security theater.
- realityking 11y agoI (as the the website's owner) have to trust one more party, which I know and have a contract with. That's a whole lot better than having to trust any random third party between me and the user of my website.