Hacker News new | ask | show | jobs
by tkgally 1360 days ago
Yes, yes. Though the site is still http, not https. I need to get on that one of these days.
1 comments

Yes, for the sake of your visitors. If your site is only http, then middleboxes can use your site load to opportunistically attack the visitor.

Of course, the probability that a visitor would not visit any other non-TLS site that day is low, but that probability is getting lower with every passing day.