Security quote of the week

Security quote of the week

AFAICS this is not actually breaking working sites.

If you have a working, not really maintained, site, you can keep it as it is, unencrypted, with no new features, and it will keep working fine. No need to touch the server hosting the site at all.

If you are actively maintaining your site and taking advantage of new browser features, then you have to move to HTTPS. In effect, “move to HTTPS” just becomes a required part of the API of the new features—but you still have the option to not use these new features if that effort is too much work.