Hacker News new | ask | show | jobs
by MrRadar 3389 days ago
> 2. https is a must if it is to be successful

The use of unencrypted HTTP is probably deliberate to allow it to be used on even very dumb devices like feature phones (see http://txti.es/images/images) and to remove the 1 to 2-RTT latency penalty for TLS 1.2 connections since that can matter when your connection latency is on the order of seconds.

1 comments

Sounds reasonable. There's no need for HSTS then. But other than that, providing secure connection shouldn't influence plain HTTP usage in any way.