logoalt Hacker News

forestoyesterday at 9:16 PM2 repliesview on HN

I can understand this in in certain contexts, such as a site that exists solely to post public information of no value to an attacker.

A local volunteer group that posts their event schedule to the web were compelled to take on the burden of https just to keep their site from being labeled as a potential threat. They don't have an IT department. They aren't tech people. The change multiplied the hassles of maintaining their site. To them, it is all additional cost with no practical benefit over what they had before.


Replies

cortesoftyesterday at 11:14 PM

The work and technical expertise to setup let's encrypt is less than the work to register a domain, set up a web server, and configure DNS to point to it.

show 1 reply
charcircuityesterday at 9:29 PM

This is why more and more organizations get away with only having social media pages where they don't have to worry about security or other technical issues.

show 1 reply