Hacker News Reader

People who don't use HTTPS apparently. :P

you can build openssl on AROS: there is a port on Aminet of OpenSSL 1.1.1i that _will_ build (the maintainers only build for AmigaOS 3/m68k and AmigaOS 4/PPC but it'll work on MorphOS and AROS too), and of course aminet is available over HTTP which is how we avoid the bootstrap problem :).

Aside: pretty much anything that will build on a BSD will build on an Amiga/AROS with ixemul.library, but some people think that's cheating.

I think it's a jab at how AROS's site doesn't offer HTTPS. Personally I don't understand why some people are so bothered by this, but I guess conversely it's really easy to add letsencrypt to about anything nowadays...

Two obvious points where leaving it unencrypted is a problem: 1. downloads - which is mostly mitigated by not actually having software downloads on their own site, although of course now the links are subvertable, and 2. they have a paypal donation form on http://www.aros.org/download.php - I assume that clicking into that sends you to the real paypal page, so at least they're not sending credit card details in the clear, but again leaves them open to a nice little tweak to change where the money goes.

Reply on news.ycombinator.com