Hacker News Reader

Comment by djsumdog | Hacker News Reader

Do you want ISPs to inject random crap at the top of your website? Because that's how you get ISPs to inject random crap at the top of your website.

I remember getting a Vodaphone sim card (I think it was in Belgium or The Netherlands) and seeing their banner displayed on MY WEBSITE! It wasn't in a language I know, and it might have just been a bandwidth warning or something to indicate I need to reload, but it was still on my website, injected right in there.

HTTP is needed for static sites, if you want to ensure your readers see the exact same site that you made.

View on HN

A few years back I used to not redirect http:// to https:// on my personal site. Then one day at an airport or something I somehow visited the http:// variant. Bam, a pop-up ad in my face.

I set up redirect and HSTS asap.

>Do you want ISPs to inject random crap at the top of your website?

If your ISP does this, or if you are on a sketchy network somewhere, then maybe you should not use it at all. Get a new ISP, or use a VPN if you are that worried. If the webmaster is not sharing sensitive information on his casually maintained static website, then that is good enough reason not to use HTTPS. I know it sounds... uncaring.

It is true ordinary people, who don't understand the risks could get MITM'd and never suspect a thing. For some reason I still don't care enough to put HTTPS on my shitty old flash game website. I just can't be bothered. I think that is good enough of a reason. Blame should go on the ISP who are MITM'ing their customers.

Sure, but when the biggest (or only) ISPs in many countries are doing it, and you can prevent it by taking out 15 minutes to set up Let's Encrypt, that's on you.

Nope. They can get a VPN, or fight against their big ISP or government to stop such dubious practices. Your point of view seems to come from a standpoint of infantilization of these users.

You expect that from the vast majority of the population which is not tech-savvy?

I expect the vast majority to complain if their internet provider is putting ads into website. The bigger the company the bigger the group.

In fairness, it's your isp that you pay for that is doing this. Asking every website to change to prevent this instead of talking to your isp and changing providers if necessary doesn't sounds like the right people are taking responsibilities.

Don't trust random sim cards you buy off of the street either.

Reply on news.ycombinator.com