Enable HTTPS?

[clauswilke]

Enable HTTPS?

[mikeloukides]

It's a pain, but I really do think all sites need to move to HTTPS. There have been some good posts about that recently, specifically about small static sites, and why even they need to move. The problem is basically that with HTTP, you're exposed to man in the middle. And with the current FCC, that man in the middle who's corrupting your site could even be completely legal: your ISP, or your reader's ISP, could decide it wants to inject ad content. To say nothing of what people and organizations with even less ethics than Comcast and AT&T might do. Mike Loukides VP, Content Strategy O'Reilly Media, Inc.

…

On Fri, Jul 20, 2018 at 11:15 AM, Yihui Xie ***@***.***> wrote: Yes, I strongly recommend enforcing HTTPS at all times, even for static sites. Many reasons for that (you may google for them), but the most obvious one to your readers will be this (you probably don't want your website to be marked as "❗️Not secure"): https://security.googleblog. com/2018/02/a-secure-web-is-here-to-stay.html If the book is hosted via Github Pages, you might need to push a commit to expedite the generation of the SSL certificate. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#34 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAZPVnNElta9SODyYCVoMUyEqEezsyi5ks5uIfQSgaJpZM4VXfhW> .

[clauswilke]

It turns out I just had to update my IP address for github pages. This should be working fine by tomorrow.

Do you recommend enforcing HTTPS at all times? Seems overkill for a site that serves publicly available static content.

[yihui]

Yes, I strongly recommend enforcing HTTPS at all times, even for static sites. Many reasons for that (you may google for them), but the most obvious one to your readers will be this (you probably don't want your website to be marked as "❗️Not secure"): https://security.googleblog.com/2018/02/a-secure-web-is-here-to-stay.html

If the book is hosted via Github Pages, you might need to push a commit to expedite the generation of the SSL certificate.

[yihui]

I see https://serialmentor.com/dataviz/ is working now. Excellent! Thanks!

[clauswilke]

Thanks to both of you for your comments. I’ve disabled http.