QUOTE(IRmudkip @ Jul 29 2016, 15:41)
Why the switch to Https anyway? Even the fjords have switched to it now.
There are many good reasons to use HTTPS and few reasons not to, most of which are technical challenges. In our case, our existing software stack didn't support and/or handle it on the necessary scale (which is solved), we needed a new setup for frontends to do the actual work (which is solved for some parts of the site and WIP for others), and some third party interactions aren't possible with HTTPS unless they are using it as well (which I still have to investigate for the parts where it is relevant).
As for why HTTPS is important:
- It prevents passive and MITM monitoring of page content and sessions
- It prevents MITM manipulation of page content, such as injecting malware or advertisements
- It prevents some content blocking techniques, to the point where if you also counter DNS-based blocks, the only technique that still works is blocking the site's IPs
("MITM" here can be anything from your government, to your ISP, to the WiFi operator of the unsecured network you haphazardly connected to.)
https H@H images not loading
Jul 29 2016, 05:44
