Hacker News new | ask | show | jobs
by orev 2941 days ago
This is one of those things security people say that just does not jibe with reality. Everything in security is a trade off with usability, and not having your site on http, just for a redirect to https, is just completely not feasible.