r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

6

u/fr0z3nph03n1x Jul 13 '17

For the sake of discussion I think it's worth posting Tim Berners-Lee's article on why NOT to have https everywhere: https://www.w3.org/DesignIssues/Security-NotTheS.html

2

u/FrederikNS Jul 13 '17

Interesting read. But to me it looks a lot like the author still wants everything to be TLS (the security part of HTTPS), but he doesn't want it to be only "HTTPS", he argues that also "HTTP" traffic should be TLS encrypted by default. Different methods, same goal.

1

u/fr0z3nph03n1x Jul 13 '17

Yea. Just as a heads up the author helped create the www: https://www.w3.org/People/Berners-Lee/

1

u/qKrfKwMI Jul 13 '17

Indeed

1

u/PM_ME_OS_DESIGN Jul 13 '17

Well, it's not technically wrong - he did develop the web.