News for hackers. Stuff that matters.

A comment on Why Facebook Apps require disabling HTTPS?.

Re:Why Facebook Apps require disabling HTTPS? by Bxstraz on Thursday May 03, 2012 @03:59PM (#3925470)
Apps are hosted on other servers. So if it is not using HTTPS (to get the app page hosted on another server), it cannot load the content over HTTPS that Facebook is using at the moment.

Switching Facebook to HTTP solves this problem. Because why use HTTPS with Facebook? It's not necessary.

Also, the deadline was October 1, 2011 (last year).

[ Parent | on HN ]
Re:Why Facebook Apps require disabling HTTPS? by VikingCoder on Thursday May 03, 2012 @04:23PM (#3925606)
I think HTTPS is entirely necessary for services like Facebook. My friends share information with me privately. Without HTTPS, any intermediary or snooper could trivially see that information.

Out of curiosity, which services do you think are better candidates for HTTPS.

[ Parent | on HN ]