Reply to post: Re: Dumb move

From July, Chrome will name and shame insecure HTTP websites

Hawkeye Pierce

Re: Dumb move

>> It's plain out nonsense that a website which doesn't ask for any user input would be more secure if it uses HTTPS vs. HTTP.

No it's not nonsense at all. A website that doesn't use HTTPS can have its pages, as displayed in the browser, modified in any way by simple MITM efforts. That's trivial to do and therefore it is most certainly less secure than if it used HTTP.

(NOTE: That's not to say it IS secure if it uses HTTPS just that it's more secure as there are less attack vectors).

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon