Hacker News new | ask | show | jobs
by zcrackerz 2399 days ago
There's really no reason to secure a site if it's just informational or someone's blog. The worst that's going to happen in this case is someone might be able to see the blog sent to you in plain text, which is no big deal, because it's public anyway. Now if it has a form asking you to enter personal information or credit card numbers, you would definitely want SSL.
1 comments

That's not entirely true though: plaintext doesn't only allow snooping but also man-in-the-middle attacks such as injecting malicious code or ads.