News for hackers. Stuff that matters.
Re:API Shouldn't Redirect HTTP to HTTPS by tessierashpool on Thursday May 30, 2024 @05:51AM (#40521870)
yeah, the assertion is entirely false. there doesn't need to be any such tradeoff.

there's probably a term for the cognitive fallacy where you assert that however it happens to be is how it had to be. it's like normalcy bias, but retroactive.

Re:API Shouldn't Redirect HTTP to HTTPS by JohnFen on Thursday May 30, 2024 @12:29PM (#40525604)
> there doesn't need to be any such tradeoff.

Maybe you're right. I've certainly heard others make this claim. I just personally haven't seen a real-world example of this being true.