News for hackers. Stuff that matters.
Re:Still Why No HTTPS? by satanspastaroll on Tuesday December 17, 2019 @07:35AM (#21812862)
Trading security for convenience is rarely a good idea. The rest of the world should not conform the to failures of certain areas to provide internet.
Re:Still Why No HTTPS? by davidmurdoch on Tuesday December 17, 2019 @08:29AM (#21813214)
I see your point. But we trade security for convenience 24/7/365. We could all have bulletproof glass in our homes, personal security cameras everywhere, backup generators, panic rooms, etc, but we don't, because it's not convenient (and I know the expense is primarily what makes it not convenient, but I think it's still a valid argument).

Providing access to Wikipedia over http to people in third world countries may be worth the risk of someone MITMing the site with propaganda.

The suggestion is only to give some users the option.

Re:Still Why No HTTPS? by pixl97 on Tuesday December 17, 2019 @09:09PM (#21821115)
Mitm with propaganda is the least of the worries. Full on exploit code is.

The fact is as an ecosystem develops completely increases. Lifeforms in that ecosystem have to spend more time and effort protecting themselves from outside attacks as time progresses.

Re:Still Why No HTTPS? by rkagerer on Tuesday December 17, 2019 @08:26AM (#21813191)
Unfortunately convenience usually does tradeoff against security. Thoughtful UX can deliver both, but it's rare to find in practice.

That casual dismissal of davidmurdoch's counterargument comes across tone-deaf to people stuck on crappy connections.

Re:Still Why No HTTPS? by oneeyedpigeon on Tuesday December 17, 2019 @07:59AM (#21813024)
No, but it's a good idea to have the option, so long as people are aware of the implications.