News for hackers. Stuff that matters.

A comment on The History of the URL: Path, Fragment, Query, and Auth.

Re:The History of the URL: Path, Fragment, Query, and Auth by shmerl on Monday July 18, 2016 @05:59PM (#12118294)
> rendering any advertisement which still contains them truly ridiculous

I don't find it ridiculous, since despite gopher going out of existence, and ftp being a minority, http vs https distinction is quite important until the present day, especially considering that redirect form http to https can be insecure and the proper way to open many sites is explicitly with https://

It might get fixed in the future, but it didn't happen yet.

[ Parent | on HN ]
Re:The History of the URL: Path, Fragment, Query, and Auth by zackbloom on Monday July 18, 2016 @06:41PM (#12118440)
We are part of the way to a solution to that: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

That said, I do think it's unreasonable to think an average Internet user will discern that you specified https. I think a better practice is to try to use https on every site, and only fallback if you decide you are willing to accept the lack of security.

[ Parent | on HN ]