Re:Does my site need HTTPS?
by remram on Tuesday February 01, 2022 @09:48AM
(#30163149)
> you are admitting that HTTP and HTTPS are both equally insecure
Absolutely not. I am pointing out that even within your (incorrect) assumption, you using HTTPS does not hurt your security at all.
That you take it to mean "HTTPS is insecure" is your own assumption, that you take it to mean "equally as insecure as HTTP" is something you made up.
A parallel: A lot of companies make seatbelts, you're not sure you can trust all of them. Even though they would be caught by quality testing and instantly go under, it is possible that one of them would build them with cheap materials that wouldn't offer much protection. Therefore seatbelts are not completely safe. Therefore wearing a seatbelt is equally as safe as not wearing one.
Absolutely not. I am pointing out that even within your (incorrect) assumption, you using HTTPS does not hurt your security at all.
That you take it to mean "HTTPS is insecure" is your own assumption, that you take it to mean "equally as insecure as HTTP" is something you made up.
A parallel: A lot of companies make seatbelts, you're not sure you can trust all of them. Even though they would be caught by quality testing and instantly go under, it is possible that one of them would build them with cheap materials that wouldn't offer much protection. Therefore seatbelts are not completely safe. Therefore wearing a seatbelt is equally as safe as not wearing one.