Hacker News new | ask | show | jobs
by brownianemotion 2089 days ago
It's a trusted site, without https it's e.g. easier to perform a mitm attack that could expose users to attacks.

Not only encryption is important, authentication too, you want to know to which party you are talking.

1 comments

What attacks is a malicious agent going to execute on a page of articles?

I think HTTPS is all well and good, but I've yet to hear a compelling reason why pages of text and images need it.

The thing is, once you man in the middle it, without https, you can serve whatever content you want. It is no longer a page of "text and images", but one with malicious scripts, malicious links, ... you name it.