←back to thread

569 points todsacerdoti | 1 comments | | HN request time: 0s | source
Show context
imoreno ◴[] No.42599386[source]
I agree with most of this. If every website followed these, the web would be heaven (again)...

But why this one?

>I don't force you to use SSL/TLS to connect here. Use it if you want, but if you can't, hey, that's fine, too.

What is wrong with redirecting 80 to 443 in today's world?

Security wise, I know that something innocuous like a personal blog is not very sensitive, so encrypting that traffic is not that important. But as a matter of security policy, why not just encrypt everything? Once upon a time you might have cared about the extra CPU load from TLS, but nowadays it seems trivial. Encrypting everything arguably helps protect the secure stuff too, as it widens the attacker's search space.

These days, browser are moving towards treating HTTP as a bug and throw up annoying propaganda warnings about it. Just redirecting seems like the less annoying option.

replies(10): >>42599423 #>>42599448 #>>42599461 #>>42599916 #>>42600279 #>>42601148 #>>42605479 #>>42605998 #>>42609172 #>>42627972 #
INTPenis ◴[] No.42609172[source]
That's the only one I had an issue with as well.

I understand the thinking, backwards compatibility of course, and why encrypt something that is already freely available? But this means I can setup a public wifi that hijacks the website and displays whatever I want instead.

TLS is about securing your identity online.

I think with AI forgeries we will move more into each person online having a secure identity. Starting with well know personas and content creators.

replies(1): >>42610331 #
1. theandrewbailey ◴[] No.42610331[source]
> I understand the thinking, backwards compatibility of course, and why encrypt something that is already freely available?

Let me explain it to you like this:

The NSA has recorded your receipt of this message.

Trust me, the NSA tracking what you read is MUCH WORSE than Google tracking what you read. Encryption helps defeat that.