Hacker News Reader

Slightly off-topic but did anyone else find it amusing that the Bank of England website does not support HTTPS? I think that's the first bank website I've ever seen that uses HTTP only.

View on HN

One of the largest banks here in Brazil is also HTTP-only for its main website. Of course, its online banking website is HTTPS-only (and until very recently, it required the use of the RC4 cipher).

It's all just policy information on there. It's not online banking. It'd be nice if all sites were available on HTTPS, but it's not unusual or funny.

you mean for you :)

There are many reasons to switch to HTTPS - protecting financial data in transit is just one of them. Here's an overview with further explanations but many similar examples exist: https://snyk.io/blog/10-reasons-to-use-https/

Yes, amazingly I understand that. But it's not any more surprising or funny that the Bank of England would be on HTTP compared to any other policy website which still isn't on HTTPS.

Okay, fair point. Perhaps I did not explain myself thoroughly.

When I see bank + policy + not just some random bank but the BANK OF ENGLAND, I do expect to see HTTPS guaranteeing the integrity of what is unquestionably important and influential data being served to decision makers.

This amused me, but maybe I'm just easily amused.

Reply on news.ycombinator.com