korrents

korrents · piece

Still think you don't need HTTPS?

Scott Helme · 28 Mar 2016

Others here said this too

Every website needs HTTPS, including a static site with no login and nothing sensitive on it.

Their wordsSupporting HTTPS on your site has so much more to offer than just protecting passwords and user's sensitive data.

Also said by Troy Hunt

Read the piece on scotthelme.co.uk ↗

2 korrents from this piece ↓

Scott Helme did not write this page.

Every claim below was made in this piece, quoted word for word and numbered in the order the piece makes them, so you can read it there rather than take our word for it. The sentence above each quote is our reading of the claim, not their wording. Each quote was checked against a stored copy of the page at build time; where the two differ, the quote is the fact.

  1. Our reading

    Every website needs HTTPS, including a static site with no login and nothing sensitive on it.

    Their wordsSupporting HTTPS on your site has so much more to offer than just protecting passwords and user's sensitive data.

  2. Our reading

    Plain HTTP lets anyone on the path rewrite the page, so HTTPS is about the integrity of what readers get, not only secrecy.

    Their wordsWhen you serve your pages over HTTP, anyone along the transport layer can do basically anything they want to your pages. More and more often it's becoming increasingly common for somebody in the chain of custody to do something to your pages that you don't want them to do.

Keep reading

The other pieces are the ones whose claims are worded most like this one's. That measures language, not agreement: they may argue the opposite.