Why Your Static Website Needs HTTPS (2018)

Re:Why Your Static Website Needs HTTPS (2018) by hombre_fatal on Saturday January 25, 2020 @11:15AM (#22146874)

Then again, the defaults of the internet let anyone remove you from it with a $5 booter and your data is in cleartext and your MITM is every ISP + any hop in between instead of just your reverse proxy.

Takes defaults far more insane than Cloudflare to do worse than the internet status quo.

[ Parent | on HN ]

Re:Why Your Static Website Needs HTTPS (2018) by tristador on Saturday January 25, 2020 @03:58PM (#22148576)

CF is undoubtedly good for DDoS protection, but that doesn't negate the fact that it does other things poorly.

FWIW I've found more websites that prompt for Cloudflare captcha than I've seen websites offline due to DDoS. I've seen lots of websites offline because they get too popular though. Many websites that I've known were currently under DDoS attack stayed online while I used them (like GitHub using Akamai).

At the risk of Troy writing a blog post proving me wrong... does the average static website need DDoS protection? I'd guess they don't.

[ Parent | on HN ]

Re:Why Your Static Website Needs HTTPS (2018) by wolco on Saturday January 25, 2020 @02:03PM (#22147939)

Can I pay 5 dollars to have the attackers attack my monero powered site? All of those resources generating coins should be worth more than 5 dollars.

[ Parent | on HN ]

Re:Why Your Static Website Needs HTTPS (2018) by beamatronic on Saturday January 25, 2020 @11:30AM (#22146961)

Sorry, what is a “$5 booter”?

[ Parent | on HN ]

Re:Why Your Static Website Needs HTTPS (2018) by zzzcpan on Saturday January 25, 2020 @11:32AM (#22146979)

Automated service for issuing DDoS attacks.

[ Parent | on HN ]