I /really/ need to add http://n-gate.com to my rss reader because it’s *so good*. This is the best description I’ve ever seen of the Microsoft acquisition of Github.

@wxcafe Interestingly, n-gate doesn't seem to support https.

@tyil doesn't matter?

@wxcafe Maybe if security doesn't matter to you. Especially given how easy and cost-free it is to set up these days.

@tyil ain’t no point in setting up https for a static site with no exchange of information. Literally who cares.

@wxcafe HTML is information, and the purpose of HTTP is to exchange it.

Anyone intercepting the connection at any point can still inject stuff (like scripts), even if the original host only provides static content. And anyone can still read out the entire message and use it for personal/meta data harvesting.

Anyone understanding what the words "information", "exchange" and "security" mean would care.

@tyil @wxcafe I mean, I agree that not using TLS is just kinda lazy now, but if I had the capability to pull off the cleartext packet injection attack you're describing literally what prevents me from just rerouting your next DNS request to a fallback insecure host of my own for more pwnage?