Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

New web features are https-only by default, since a few years ago. So if your site uses any recent APIs, dropping encryption is not an option.




Secure context is only required for features that are somehow privacy- or security-sensitive. Some notable features are on the list, but you can absolutely have a modern site that doesn't rely on any of these.

Securing your communications is required to mitigate against main in the middle attacks.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: