Hacker News new | ask | show | jobs
by vbezhenar 167 days ago
They are insecure, because your ISP can change website responses and text format doesn't protect from that. So basically browser can't guarantee that you're looking at original web server response.
2 comments

Insecure only if HTTP instead of HTTPS.

The format being text, html, video, or an executable program has nothing to do with it.

This site is being deliver over HTTP instead of HTTPS, that is why it appears as insecure.
With checksum & sign nothing can be guaranteed, right ?
Why?