News for hackers. Stuff that matters.
Re:Upcoming Changes to Let's Encrypt Certificates by xg15 on Monday December 15, 2025 @05:25PM (#46281658)
New web features are https-only by default, since a few years ago. So if your site uses any recent APIs, dropping encryption is not an option.
Re:Upcoming Changes to Let's Encrypt Certificates by zozbot234 on Monday December 15, 2025 @05:42PM (#46281866)
Secure context is only required for features that are somehow privacy- or security-sensitive. Some notable features are on the list, but you can absolutely have a modern site that doesn't rely on any of these.
Re:Upcoming Changes to Let's Encrypt Certificates by manindahat on Monday December 15, 2025 @06:51PM (#46282718)
Securing your communications is required to mitigate against main in the middle attacks.