Hacker News Reader

> Why the hell is this site not https? This looks like a honeypot to me

How does TLS vs No TLS weight in on your suspicious if something is a honeypot or not? It's as trivial for three-letter agencies/black hats to setup as for trusty individuals/corporations.

View on HN

We're talking about seeding a library full of copyrighted content. The person who made this site couldn't take 2 seconds to set up HTTPS? They're either incompetent or part of a honeypot. In either case, it's best to steer clear

Keep in mind, the first post on this site was in 2022. 2022, and no https... is this some kind of joke?

And in this case the adversary isn't necessarily the three letters, it's the copyright holders and legal system. No https makes ISP logs even more useful

Again, how does no HTTPS makes it more likely to be a honeypot than not? Everything on that website is about being a "pirate archivist", they don't even need to know what page you visited, just that you visited the domain, so the SNI and Host header already gives it away, TLS or not.

> so the SNI and Host header already gives it away, TLS or not

Couldn't you just use ech/esni, ISP wouldn't see the domain only IP (and dns provider)?

We can't because nobody supports it. Only firefox has support for esni and it's behind an about:config

Reply on news.ycombinator.com