Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is false. Just because the page content isn't sensitive, that doesn't mean that TLS is worthless.

TLS prevents your run of the mill MITM scenarios. Like ISPs inserting ads (something Comcast actually did), or public wifi doing the same. Or worse, more malicious scripts.

You could argue that all I'm really looking for in most cases is message integrity (signing), but if you're going to do that, you might as well just encrypt it too and avoid accidents where sensitive information is sent over encrypted channels.



Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: