Ask HN: Is “HTTPS everywhere” necessary?
There seems to be a push to encrypt the entire web. For example:<p>https:&#x2F;&#x2F;nakedsecurity.sophos.com&#x2F;2016&#x2F;09&#x2F;09&#x2F;google-to-slap-warnings-on-non-https-sites&#x2F;<p>Is this really necessary? For example take a simple restaurant site. It is just going to give the name, have some pictures, have the menu, list the hours and a phone number, etc. Who cares if it is sent&#x2F;received in plain text? Who cares if someone in the middle could see the content?<p>What would someone do with that information? Decide they were hungry and go check out the restaurant?<p>Sure the CMS system where the restaurant manager&#x2F;owner logs in to update the sites menu should be encrypted, but the front end where people are just viewing the information? Why should anyone go through the trouble of encrypting that?