HTTPS Security Debate

The cluster centers on debates about the necessity and limitations of HTTPS for web security, especially in preventing man-in-the-middle attacks, ensuring page integrity, and criticisms of sites served over plain HTTP.

📉 Falling 0.4x Security
4,943
Comments
20
Years Active
5
Top Authors
#2455
Topic ID

Activity Over Time

2007
3
2008
71
2009
52
2010
226
2011
236
2012
238
2013
413
2014
414
2015
416
2016
444
2017
455
2018
371
2019
302
2020
316
2021
204
2022
252
2023
223
2024
137
2025
161
2026
9

Keywords

equifax.ca EDIT HTTPS THEIR HTTP FS i.e boingboing.net warni.html YouTube https ssl http secure security site malicious user server tls

Sample Comments

dreamsofdragons • Jun 30, 2016 • View on HN

None, obviously. If you don't have https, you don't even have the illusion of security.

jiggawatts • Jun 1, 2022 • View on HN

Why would that matter if they have HTTPS?

Swennemans • Jun 30, 2016 • View on HN

Wow no HTTPS, makes you wonder what security measures they did take.

tlrobinson • Aug 29, 2013 • View on HN

Yes, however isn't this sort of what HTTPS is supposed to accomplish?

shif • Apr 22, 2017 • View on HN

HTTPS isn't bulletproof either, the argument could still be made with TLS

Aaron1011 • Sep 7, 2016 • View on HN

Why? Without HTTPS, anyone between a user and your server can modify your page, without you noticing.

jsheard • May 4, 2025 • View on HN

Because the point of HTTPS is to prevent man in the middle attacks. It isn't supposed to do everything.

teknopurge • Nov 29, 2020 • View on HN

https does not 100% prevent any of those things.

ksrm • Dec 20, 2013 • View on HN

Won't simply always using HTTPS protect you from this?

bduerst • Sep 29, 2015 • View on HN

Wouldn't HTTPs prevent that?