Hacker News new | ask | show | jobs
by superkuh 1980 days ago
You can argue for wearing a bulletproof vest at home if you're an iraqi nuclear scientist. But for most people it doesn't make sense and does more harm than good.

In the same way, HTTPs only, *requiring* a system that "fails open", is bad for the general population. HTTP+HTTPS, yes, definitely. HTTPS only, no, only for sites and contexts where the rigid security is justified.

1 comments

Yes context is key. Its ok for wikipedia to fail back to HTTP but not for bank.