https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/


This is a logical consequence of the HTTPS bandwagon. They want to slowly kill regular, 'unsecure' HTTP.


a) Is HTTPS really as secure as they want us to believe? It has been shown to be vulnerable to MITM attacks in a completely transparent fashion for the end user. There are programs exploiting this to insert ads in HTTPS pages, so one might as well exploit it for malicious purposes.

b) And there's the whole issue that HTTPS requires, you know, a certificate. That shit costs money. If they force it on everyone, that means killing the web's personality as only the rich ones will be able to make their own website. All the others will need to use big standardized 'free' platforms like, you know, Proboards.

Or alternately, certificates would become so cheap that they basically would mean nothing other than 'our connection is encrypted'. How do you tell that that site claiming to be your bank is indeed your bank?



Kuribo64 isn't jumping on the https bandwagon unless there is a major advantage.


For over two years, every time someone logged in, credentials have been sent in plaintext to the board, easily readable to anyone sniffing your connection. And yet, have accounts ever been hijacked? Nope.

____________________
NSMBHD - Kafuka - Jul
melonDS the most fruity DS emulator there is

zafkflzdasd