Live data from Hacker News

Should All Web Traffic Be Encrypted?

codinghorror.com

31–40 of 136 posts

Re: Should All Web Traffic Be Encrypted?

#32

Earlier quoted context omitted.

You know it's become a huge internet meme right? http://www.google.com.au/search?q=x+all+the+things&oq=x+... .

Does rampant theft make theft any more acceptable?

Apparently, yes.

https://en.wikipedia.org/wiki/Generic_trademark#Trademark_er...

Re: Should All Web Traffic Be Encrypted?

#33
post #3

We use CloudFlare. $20/month and you get your whole site encrypted plus all their other really cool features. It is a no brainer for those of us who can do it without violating contracts.

It really isn't a no brainer. Passing our users' data through CloudFlare would violate our contracts with a number of clients. I'm also dubious about the privacy implications - they're presumably getting something out of those terabytes of free traffic they're handling.

Re: Should All Web Traffic Be Encrypted?

#34
For content that is already public but needs to be protected from modification like images and scripts couldn't it be hashed and the hash just sent with the page your viewing. Then the browser could download extra assets from an insecure source like a proxy or cdn and know that it hasn't been modified?

Re: Should All Web Traffic Be Encrypted?

#36
post #7

Sorry, off-topic, but as a fan it really bugs me that graphic halfway down appears taken without attribution from Hyperbole and a Half. http://hyperboleandahalf.blogspot.com/

If not for your post I wouldn't have known the meme was from this comic, and then gone and read the blog and enjoyed it and now appreciate the meme more.

Re: Should All Web Traffic Be Encrypted?

#38

Earlier quoted context omitted.

You know it's become a huge internet meme right? http://www.google.com.au/search?q=x+all+the+things&oq=x+... .

Does rampant theft make theft any more acceptable?

No, but the fact that copyright infringement is not theft might.

Re: Should All Web Traffic Be Encrypted?

#39
post #32

Earlier quoted context omitted.

Does rampant theft make theft any more acceptable?

Apparently, yes. https://en.wikipedia.org/wiki/Generic_trademark#Trademark_er...

IANAL, but since the content in question is not a trademark, I do not think that genericization applies.

Since Hyperbole and a Half is Creative Commons licensed (CC-NC-ND), it looks like its licensing requirements would be satisfied by attributing the original source ("Proper credit includes a prominent, easily visible link to the source of the material you want to use...")[1].

I think making sure that images in your blog post are properly licensed is difficult [2], but on the same level of difficulty and importance as determining a license for a software project [3].

[1]: http://hyperboleandahalf.blogspot.com/p/faq_10.html

[2]: I have personally had issues with this, which I wrote about at http://www.marteydodoo.com/2011/01/19/licensing-is-hard/

[3]: http://www.codinghorror.com/blog/2007/04/pick-a-license-any-...

Re: Should All Web Traffic Be Encrypted?

#40
post #22

Earlier quoted context omitted.

By definition, since Google can index email and mine it for keywords, they have access to the contents of it, which makes it isomorphic to plaintext.

That's not the same thing though. Plain text is a security risk because users tend to reuse passwords. If it's hashed then that wouldn't be the case, even if they can mine it or whatever.

What the hell are you talking about?

Google is not storing hashes of your emails instead of the emails. How is anything under discussion related to passwords?

Post reply on HN