Why doesn't pg use HTTPS on his site?

https://news.ycombinator.com/item?id=27065639

by slygent • 5 years ago

7 14 5 years ago

news.ycombinator.com

Going to http://www.paulgraham.com doesn't redirect to https

And https://www.paulgraham.com tries to use a certificate for *.store.yahoo.com

tacostakohashi• 5 years ago

Perhaps he has better things to do with his time that mess around with SSL certificates.

verdverm• 5 years ago

He certainly could afford to pay someone

sthnblllII• 5 years ago

Im more impressed that he does it himself.

codegeek• 5 years ago

Because he doesn't care ? I mean yes SSL is easy these days but he knows he doesn't have to do it and people would still read this blog.

kypro• 5 years ago

He probably just has better things to do and who cares (aside from Google)?

I have a number of old sites (including my blog until recently) which haven't been switched over to https yet. It's not that I can't do it or that there's any real reason not to use https on those sites, I just have other things going on. PG set up his site years ago when https wasn't a default on the web, that's probably the real answer.

xkeysc0re• 5 years ago

He still uses an iMac G3

quickthrower2• 5 years ago

If you want to here someone else’s argument for why they don’t need https, see

    http://n-gate.com/software/2017/07/12/0/

Paste the link in a new window as the site is not idempotent with respect to referral headers. Or in layman’s terms he blocks links from HN!

prepend2• 5 years ago

I don’t think there’s a reason to as it’s just content published from him for free. Doesn’t collect data. Doesn’t hold anything sensitive.

Maybe somebody gets between a reader and his site and injects ads or something.

Or maybe ISPs or local networks can watch what readers read.

I don’t think either is that big of a deal and wouldn’t bother if I had sites.

nkristoffersen• 5 years ago

I’ve seen several ISPs inject things as well. No excuse for http anymore. No rewards, only risks and punishments.

prepend2• 5 years ago

If you’re concerned with that then use a vpn.

I’ve used dozens of ISPs and never had this problem. Guess I’m lucky.

I don’t care if people inject stuff into my http content. If it becomes a significant problem, I’ll think about it.

Simplicity is a reward. A big reward.

runjake• 5 years ago

No excuse

You're not paying him anything to read his website. He does not owe you a single thing.

gabrielsroka• 5 years ago

https://news.ycombinator.com/item?id=25214264

https://news.ycombinator.com/item?id=24676257

avinassh• 5 years ago

That reminds me, what other popular sites which are HTTP only (and no HTTPS)?

weedfroglozenge• 5 years ago

Australian Government weather website, www.bom.gov.au

Why doesn't pg use HTTPS on his site?

Related Stories