Hacker News Reader

Comment by phantom_oracle | Hacker News Reader

I'm guessing if you're going to blog about security, it would make sense that vidiguard.com (the main site) should be, at the very least, HTTPS-enabled.

View on HN

Their main web site is 100% completely unusable on my iPad.

The content is completely covered by a blue overlay with a couple of "spinny things" on it that never go away. I took a screenshot but can't upload it anywhere at the moment. I'll send it over to my laptop and upload it shortly.

Screenshot: http://i.imgur.com/t079tiF.png

Why does their marketing website need to be HTTPS-enabled? I mean, they will need to do it to appease Chrome in a few months, but really it has no effect on just about anything. They don't administrate the drones through their marketing front page.

The website has other problems though, mainly the excess of effects and reliance on hover states for presenting useful information. Nothing that HTTPS is going to fix.

Marketing sites often provide contact information for your organization. A MITM on your marketing site means Mallory can alter your contact details and potentially intercept your communications.

This is one reason to enable HTTPS on your marketing site. There are many many others. What reason do you have for not enabling HTTPS?

HTTPS has been a ranking factor in Google Search Results for awhile; meaning not using HTTPS is a negative.

I've noticed a number of security-related companies opting against HTTPS for their website.

Does anyone have any idea why that might be the case?

They are lazy and human and try to prioritize effort. Same reason some security guards forgot to lock the door to their house at night.

Reply on news.ycombinator.com