Hacker News new | ask | show | jobs
by comboy 3394 days ago
1. I like it

2. https is a must if it is to be successful

3. I entered a custom url like_this and it was automatically changed to like-this, which is nice, but was very confusing, since I couldn't later find the page. I think it would be better to just tell me that I included some characters that are not allowed. Same with dots, which got me while trying to create robots.txt ;)

1 comments

> 2. https is a must if it is to be successful

The use of unencrypted HTTP is probably deliberate to allow it to be used on even very dumb devices like feature phones (see http://txti.es/images/images) and to remove the 1 to 2-RTT latency penalty for TLS 1.2 connections since that can matter when your connection latency is on the order of seconds.

Sounds reasonable. There's no need for HSTS then. But other than that, providing secure connection shouldn't influence plain HTTP usage in any way.