Why HTTP without encryption and self-signed sertificates are OK

Re:Why HTTP without encryption and self-signed sertificates ... by smoppi on Wednesday September 14, 2022 @09:19AM (#32836762)

I am living in reality. I don't want to limit the user's freedom. Sometimes people have to learn the hard way, but the other option (giving away your freedoms) is always worse.

[ Parent | on HN ]

Re:Why HTTP without encryption and self-signed sertificates ... by ryan-c on Friday September 16, 2022 @08:15PM (#32873608)

> Sometimes people have to learn the hard way

This isn't reasonable or ethical - and it's telling you didn't respond to my other comment replying to you.

If someone experiences harm due to use of unencrypted HTTP because they didn't understand the implications of it, they're not going to be able to make a causal association. Without the causal association, there is no opportunity to learn.

The way to "preserve freedoms" in these sorts of situations is to require a "warranty voiding" action.

[ Parent | on HN ]