Hacker News Reader

This is why I make sure my personal blog redirects to https, and why I typically install things like "https everywhere" browser extensions.

I know this kind of stuff happens, and I don't want to waste time tracking it down and shaming people for doing it.

View on HN

In 2012 HTTPS was only common on websites that actually processed sensitive information like online shops and banks. Most websites/BBs (even with logins) didn't use HTTPS as it required you to buy a certificate. Lets Encrypt was not around back then

I know, for the longest time my hosting provider "claimed" I needed a static IP in order to have https.

It wasn't until there was a bigger push that they "realized" that https doesn't require a static IP.

It was required - back in the early aughts, and modern TLS adoption with SNI was far from guaranteed even in 2012.

Reply on news.ycombinator.com