Hacker News new | ask | show | jobs
by Foober223 2033 days ago
You're not submitting data to him, so no benefit to protect you there.

There is a risk downloading the text. Does it warrant a signature? I don't think so.

When you hand out candy on Halloween you could include a digital signature with each piece you hand out. People receiving the candy would have more confidence it came from you, and not a bad guy wearing a mask, sitting on your front porch impersonating you.

Does everything need signatures? The stakes of accepting candy are much higher simple raw text.

3 comments

This is a misunderstanding of the reasons to use https. ISPs can inject ads or other stuff if it's not https.
Are they, though? I think thats the point.

Edit: to be fair, I mean in this specific case. And I know they _could_ be. But are they?

> You're not submitting data to him, so no benefit to protect you there.

This is a common misconception. If a page is using http, an attacker could add a sign-up form, a login form, a payment form, a malware download etc. or anything they want to the page to steal entered data or just redirect you to another malicious site, anything they want.

You’re supposed to be worried about your ISP or the government knowing that you’re reading essays online.