Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 2 Apr 2015 23:47:48 +0200
From:      Terje Elde <terje@elde.net>
To:        Dieter BSD <dieterbsd@gmail.com>
Cc:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   Re: Why does FreeBSD insist on https?
Message-ID:  <E47741FC-B2F8-4C22-A3F7-585F4086B12D@elde.net>
In-Reply-To: <CAA3ZYrD_2AaDfW3oJ-NFt333DrjOwgBR-8bbqH0eVZGL6Y_5WQ@mail.gmail.com>
References:  <CAA3ZYrD_2AaDfW3oJ-NFt333DrjOwgBR-8bbqH0eVZGL6Y_5WQ@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2. apr. 2015, at 22:26, Dieter BSD <dieterbsd@gmail.com> wrote:

> What is this intended to accomplish?

You could argue that it should be users choice to use http or https. With th=
e amount of traffic-modification that's starting to show up though (ad-injec=
tion, malicious code-injection, and so on), I think it's fair enough to argu=
e that it's now also in the providers interest to use https, to ensure the c=
onten received is the content sent.=20

I wouldn't appreciate it if someone visited one of my sites, and got a modif=
ied version of what I intended the visitor to get. Redirecting to https is t=
he most obvious step towards avoiding that.=20

If it's causing you any actual trouble, I'm sure people would be more attent=
ive if you explained any real-world issues with it, rather than simply writi=
ng it off as a problem, and demand it "fixed".=20

Terje




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E47741FC-B2F8-4C22-A3F7-585F4086B12D>