Danbooru

Https?

Posted under General

It's always bothered me that I'm basically broadcasting my login information by coming here. Call me paranoid, but I'm sure that I'm not the only person who feels this way.

I just want to know, what's the rationale behind not using https? Is it implementation difficulties? Server load? The cost of getting a certificate?

Updated by dovac

akbjker said:
I just want to know, what's the rationale behind not using https?

You probably err in your assumption that there's a rationale. The default assumption should always be just "No one bothered."

Updated

It would be nice to have https optionally available for the whole site, but I imagine it would be quite a bit of effort to get running and IIRC there are still year-old bugs that need fixing more than this needs adding.

You're asking why an anime images site doesn't use https.

If you're using one login/password for every site it's your own fault. This is unlikely to ever happen, as Serlo said there's 100000 things that come before "secure anime image browsing."

Serlo said:
It would be nice to have https optionally available for the whole site, but I imagine it would be quite a bit of effort to get running and IIRC there are still year-old bugs that need fixing more than this needs adding.

Heh, then that means I don't browse this place very much since I've never encountered any.

Log said:
If you're using one login/password for every site it's your own fault.

Well, I never said that.

1