Hacker News Reader

Slightly off-topic, but isn't it a bit weird that Science Magazine isn't running on HTTPS?

Article isn't paywalled. Did not need me to login/register. They did not ask me for my email. Don't care about http/https. Should I ?

If you are on a public internet connection you should. I could theoretically replace the content of that page with whatever I want. A crypto currency miner, some zero day JavaScript exploit that will download a key logger on your computer etc. Https helps to mitigate these sort of man in the middle attacks, even on static content.

I'm on a public internet connection, but I'm not too worried because to perform such an attack, you would have to compromise some physical network infrastructure between me and sciencemag.org, and do it in a such a way to not get yourself in trouble with the law.

It's possible sure, but it seems difficult enough to not worry about.

You don't even have to go that far, it's usually done between you and the router.

It's easy for an attacker on your WiFi network, in some cases.

Your WiFi network might be encrypted, which might be a broken encryption, or might be unencrypted to discourage excessive use.

Reply on news.ycombinator.com