Paulgraham.com doesn't use SSL Certificate? • Hacker News Board

Re: Paulgraham.com doesn't use SSL Certificate?

#11

Post by mattmanser » Tue, May 18, 2021, 5:00 PM UTC

adydaddy wrote: post #3

Then why investor due diligence teams ask for ssl , policies around SSL, if this is not important?

Protecting form data, ajax, etc which the site doesn't really have.

SSL can also stop your ISP infecting content, but if they're doing that you've got a crap ISP.

Re: Paulgraham.com doesn't use SSL Certificate?

#12

Post by netflixandkill » Tue, May 18, 2021, 5:02 PM UTC

caseyscottmckay wrote: post #2

Does it need it? All the site does is show you text.

I used to be of this opinion but enough ISPs and other intermediaries will happily MITM http (and DNS) if they can to inject ads or redirects to affiliates.

With modern hardware and letsencrypt, getting SSL going is about close to free and less effort than what most "just text" sites do for their content.

Re: Paulgraham.com doesn't use SSL Certificate?

#13

Post by Nicksil » Tue, May 18, 2021, 5:04 PM UTC

Ask HN: Why Isn't Paulgraham.com on HTTPS? https://news.ycombinator.com/item?id=25214264

Paul Graham still does not offer HTTPS on his site https://news.ycombinator.com/item?id=23059825

Ask HN: Why Doesn't Paul Graham Get a SSL Certificate? https://news.ycombinator.com/item?id=24351945

Why doesn't pg use HTTPS on his site? https://news.ycombinator.com/item?id=27065639

Re: Paulgraham.com doesn't use SSL Certificate?

#14

Post by Sohcahtoa82 » Tue, May 18, 2021, 5:10 PM UTC

caseyscottmckay wrote: post #2

Does it need it? All the site does is show you text.

Yes, static sites still need HTTPS. Troy Hunt explains it well:

https://www.troyhunt.com/heres-why-your-static-website-needs...

Re: Paulgraham.com doesn't use SSL Certificate?

#15

Post by adychandra » Tue, May 18, 2021, 5:16 PM UTC

umm interesting. reading threads nick you have shared.

Re: Paulgraham.com doesn't use SSL Certificate?

#16

Post by adychandra » Tue, May 18, 2021, 5:18 PM UTC

but still my only submission is that if SSL is one of criteria;s in all Due dils, then how it would be difficult to add one PG;s site? or why to make such a big fuss around it?

Re: Paulgraham.com doesn't use SSL Certificate?

#17

Post by dmingod666 » Tue, May 18, 2021, 5:29 PM UTC

Can't access on the phone, chrome shows a safety screen (probably can bypass it)

Re: Paulgraham.com doesn't use SSL Certificate?

#18

Post by diogenesjunior » Tue, May 18, 2021, 6:21 PM UTC

Of course it gets flagged

Re: Paulgraham.com doesn't use SSL Certificate?

#19

Post by _6mdd » Tue, May 18, 2021, 6:24 PM UTC

caseyscottmckay wrote: post #2

Does it need it? All the site does is show you text.

>Does it need it?

Yes. It's that simple.

Re: Paulgraham.com doesn't use SSL Certificate?

#20

Post by dvfjsdhgfv » Tue, May 18, 2021, 6:48 PM UTC

Sohcahtoa82 wrote: post #14

caseyscottmckay wrote: post #2

Does it need it? All the site does is show you text.

Yes, static sites still need HTTPS. Troy Hunt explains it well: https://www.troyhunt.com/heres-why-your-static-website-needs...

N-gate has done a good job of debunking these arguments (google for "Discourse on HTTPS n-gate").