• Lime Buzz (fae/she)@beehaw.org
    link
    fedilink
    English
    arrow-up
    10
    ·
    4 days ago

    The website they link to really needs https. There’s no reason not to have it since it’s free nowadays. Seems dodgy not to have it.

    • boonhet@sopuli.xyz
      link
      fedilink
      arrow-up
      3
      arrow-down
      4
      ·
      4 days ago

      It really doesn’t, on a technical level.

      You’re not sending them any data. None that they send you is unique to you. There’s no real benefit in encrypting it.

      • Kissaki@beehaw.org
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        3 days ago

        None that they send you is unique to you.

        By not transporting via https you can not be sure about that, because you can’t be sure it’s them sending you the data.

        An injecting proxy could add ads, or scams to the content.

        It may not make a difference on the sending end, but it does on the receiving end.

      • colourlessidea@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        13
        ·
        4 days ago

        There’s no real benefit in encrypting it.

        When you request a website over http your ISP can intercept the request (this is how captive portals for free WiFi work, and the reason for the existence of pages like captive.apple.com to be HTTP-only). IIRC they can also insert whatever they want to on the web page, I believe there was a case a while back of ISPs doing that.

        • boonhet@sopuli.xyz
          link
          fedilink
          arrow-up
          4
          arrow-down
          1
          ·
          4 days ago

          Oh, right. I forgot American ISPs are allowed to pull shit like that. I don’t think this would fly where I live. I also don’t use public WiFi, because why would I even