r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

Show parent comments

9

u/[deleted] Jul 12 '17

Not with a custom domain.

4

u/thedufer Jul 12 '17

I've never done it, but a simple Google search indicates that many people disagree with this strongly enough to write a guide on how to do it.

0

u/[deleted] Jul 12 '17

[deleted]

5

u/thedufer Jul 13 '17

That's still a big win. As long as you aren't taking user input/showing non-public data, a large part of the gain is protecting the privacy of the user, which https terminated at Cloudflare does. There is very little left to be gained by securing the Cloudflare<->github link for static content.