Paulgraham.com doesn't use SSL Certificate?

#1

Post by adychandra » Tue, May 18, 2021, 4:21 PM UTC

Re: Paulgraham.com doesn't use SSL Certificate?

#2

Post by caseyscottmckay » Tue, May 18, 2021, 4:35 PM UTC

Does it need it? All the site does is show you text.

#3

Post by adydaddy » Tue, May 18, 2021, 4:47 PM UTC

Then why investor due diligence teams ask for ssl , policies around SSL, if this is not important?

#4

Post by adydaddy » Tue, May 18, 2021, 4:50 PM UTC

It is supposedly integrated with Yahoo store although defunct and has a search text box as well.

#5

Post by adydaddy » Tue, May 18, 2021, 4:51 PM UTC

Best practice starts from home it not only for folks who need money but for folks who give money as well.l.llll

#6

Post by wayneftw » Tue, May 18, 2021, 4:56 PM UTC

caseyscottmckay wrote: post #2

Does it need it? All the site does is show you text.

One thing that I don't like about unsecure sites is that, depending on the ISP or Wifi access point, they might inject things into the stream.

#7

Post by thesimon » Tue, May 18, 2021, 4:56 PM UTC

No

#8

Post by [deleted] » Tue, May 18, 2021, 4:57 PM UTC

caseyscottmckay wrote: post #2

Does it need it? All the site does is show you text.

[deleted]

#9

Post by halfdan » Tue, May 18, 2021, 4:58 PM UTC

caseyscottmckay wrote: post #2

Does it need it? All the site does is show you text.

Yes, because not having it will still leave your browsing on that site succeptible to MITM attacks.

#10

Post by benmmurphy » Tue, May 18, 2021, 4:58 PM UTC

it looks like it is vhosted with store.yahoo.com

his site is probably only meant to serve HTTP but gets HTTPS with the wrong cert because of the vhosting of the other site.