Quote:
Originally Posted by cyan
It's worth pointing out that an HTTPS site doesn't make things really any more secure per-se all you're doing is encrypting the data before it gets unencrypted out the other end  |
Actually it does prevent man in the middle attacks. Anyone monitoring a stream of data will only see junk on an https connection, whereas http will be plaintext, and it's not too difficult to setup a regex to search automatically for potentially meaningful data.
And seeing as we do share some personal information via PMs (phone numbers at least, if not address info too) which are presumably also not encrypted, this does warrant some thought about switching to https. TDF uses https, although USians tend to be a lot more tinfoil hat than us laid-back Brits. But idk if there's a cost to providing an https service.