Comment Re: Very Annoying (Score 1) 110
You're exaggerating or incorrect about a few things as drinkypoo mentioned but I am with you on not everything needing SSL. Static, low-risk content, where there's little harm possible from MitM (eg, some big media file especially where you're going to check md5sum anyway, text files with random jokes, collections of memes, tbh like half the pointless bs people post on social media), is probably fine to put on plain http. It's annoying that when I put stuff like that on http to save some cycles on a tiny server, nearly every web browser does "OOH BIG SCARY YOU'RE BEING HACKED OMG!!!! ALERT ALERT ALERT!!!".
To be fair, the people who understand how to manage risk probably can handle that browser interstitial without freaking out, but still.
And all of the cloud and SSL providers are now insistent that they know what's best for the web, requiring public expiration to get so short â" which just so happens to be a great way to sell more certificates and managed cloud services.
At least Let's Encrypt exists, but you have to wonder if that will always be the case...