Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

completely ignoring privacy. ISP's "collect" (read: eavesdrop) on all data they can get their hands on.


ISPs know IP addresses anyway, even with HTTPS. Same with DNS names.

SSL makes a lot of sense on web sites like facebook and youtube: users enter sensitive data there, servers serve terabytes of available content, not all of which is public, and even for public, the user’s selection is privacy-sensitive.

For a small static web sites, any person in the world can get their hands on all the content, that’s the whole point of public Internet. There’s no privacy-sensitive data in HTTP traffic to these sites, unless there’s google analytics, ads, or some other malware on that site.


Say you trust mrb on hackernews. He lists his website on his profile page. You go to that site. How do you know you are seeing what mrb wants you to see (his contact info). SSL.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: