OpenSSH 7.4 released • Hacker News Board

Re: OpenSSH 7.4 released

#41

Post by Esau » Tue, Dec 20, 2016, 2:01 AM UTC

erelde wrote: post #2

Why isn't openssh.com served over https ? You'd think it would be, given where it comes from, who those people are and what it is. (tone: I'm just surprised)

Not directed at you personally - but I wish people would stop fetishizing https. Not everything needs to be encrypted.

Re: OpenSSH 7.4 released

#42

Post by quesera » Tue, Dec 20, 2016, 5:43 AM UTC

Esau wrote: post #41

erelde wrote: post #2

Why isn't openssh.com served over https ? You'd think it would be, given where it comes from, who those people are and what it is. (tone: I'm just surprised)

Not directed at you personally - but I wish people would stop fetishizing https. Not everything needs to be encrypted.

Everything needs to be encrypted.

Re: OpenSSH 7.4 released

#43

Post by aaronmdjones » Wed, Dec 21, 2016, 2:05 PM UTC

Esau wrote: post #41

erelde wrote: post #2

Why isn't openssh.com served over https ? You'd think it would be, given where it comes from, who those people are and what it is. (tone: I'm just surprised)

Not directed at you personally - but I wish people would stop fetishizing https. Not everything needs to be encrypted.

HTTPS is about more than just confidentiality (encryption), though. There's also authentication (the party serving the traffic to you is the party you asked for) and integrity (the traffic has not been modified since it was sent).

This prevents all kinds of undesirable behaviour; like your ISP injecting JavaScript ads into the webpages you view.

Confidentiality is just a nice little side-benefit.