Hacker News new | ask | show | jobs
by dewey 3408 days ago
I'm not sure why you even want to discuss the details of my simple suggestion or "demand" at length like that...

But to answer your question: I think if you are running a message board / forum for people to discuss various topics in general you should try to keep your users as safe as possible within your means. That means https, no plain text passwords in the database - basic stuff really.

PS: The DNS on your website as linked in the profile isn't set. Only the www. subdomain works.

1 comments

> I think if you are running a message board[...]

Are we talking about the suitability of operating any unencrypted endpoint without TLS, or are we limiting ourselves to message boards? If the latter, does that mean there are forgivable reasons to run HTTP-only applications that aren't message boards?

> The DNS on your website as linked in the profile isn't set

DNS is set up, it just doesn't have an A record or CNAME for the bare (second level) domain. That's intentional.

> Only the www. subdomain works

The other subdomains are certainly working.

> I'm not sure why you even want to discuss the details of my simple suggestion or "demand" at length like that

Because in response to this:

> failure to use HTTPS[...] is still a totally forgivable sin today

You said this:

> I disagree