Hacker News new | ask | show | jobs
by iyn 3545 days ago
I agree with that, but I have a small suggestion until these points are reality: you can consider adding/enabling SSL/TLS for your blog. Thanks!

P.S. I really like your posts and your tweets are hilarious, please don't ever stop.

1 comments

Ok, this tweaks my curiosity. Why would one put SSL on a static personal/blog type website (assuming one doesn't care about the google penalty)?
Otherwise network operators can sniff, alter, and generally fuck with the integrity of the site and its users.
For example, ISPs are not able to crawl your traffic if it's via HTTPS. I've worked on data sets gathered by major ISPs and it's scary how much they know about their users (especially if they also have a mobile phone with the same company). ISPs use such intelligence for personalised marketing (either for their own product catalogue or 3rd parties)
The URL isn't encrypted though, is it? Since there's no dynamic content on the page, they already know exactly what you're looking at.
The domain isn't, the full URL is. (But content size etc probably still allow identification of an individual page on a small site, and the context of the domain is already valuable)