News for hackers. Stuff that matters.

A comment on Facebook open-sources Detectron. Parent comment

Re:Facebook open-sources Detectron by Sir_Cmpwn on Tuesday January 23, 2018 @08:31AM (#16213391)
The idea that you have no requirement to is wrong - your site may not have sensitive information but without SSL it can be MITM'd and used as a vector for malware, ad injection, etc.
[ Parent | on HN ]
Re:Facebook open-sources Detectron by Jaruzel on Tuesday January 23, 2018 @10:38AM (#16214358)
You argument is valid (somewhat), but I don't think that I attract enough traffic on a constant basis, to invest the time and effort to SSL up all my domains.

So far I've had a less than stellar experience with letsencrypt, so I'm not quite ready to go all free-certs just quite yet. It also requires a rebuild of my web-server[1] which I've been putting off for a very long time already.

---

[1] See my other post in this thread.

[ Parent | on HN ]
Re:Facebook open-sources Detectron by Lutin on Tuesday January 23, 2018 @11:36AM (#16214853)
Why not just use Cloudflare? They do SSL termination for free, plus you'd get caching to boot.
[ Parent | on HN ]
Re:Facebook open-sources Detectron by Sir_Cmpwn on Tuesday January 23, 2018 @10:42AM (#16214389)
So long as your site doens't have SSL you shouldn't be linking people to it. You're under no obligation to drop everything and fix your web server security but you should really stop using it until you do.
[ Parent | on HN ]