News for hackers. Stuff that matters.
Re:Life Is About to Get Harder for Websites Without HTTPS by archagon on Wednesday July 12, 2017 @07:05AM (#14751520)
That is only a facade of security, since you have to assume trustworthy behavior on the part of Cloudfront and Cloudflare.

I'd rather deal with the very occasional “why not secure?” e-mail rather than pretend my site is actually secure. (I only serve static pages, not forms.)

Re:Life Is About to Get Harder for Websites Without HTTPS by jopsen on Wednesday July 12, 2017 @03:20PM (#14755697)
Yes and no, if the github pages is served from S3 or other resource inside AWS network, then cloudfront would be safe.

And regardless of that it offers privacy for your users.

Beyond privacy it also vastly improve security too, since users are most likely to have malware and ads injected by an infected wifi router.

It also increases complexity of an attacker that has control of the local machine, since they'll now have to install a custom root certificate.

Nothing is perfectly safe, all we can do is raise the bar.