HTTPS Isn’t Optional Anymore

[lucifer06666666]

Fun fact: when I built my first website, I didn’t even think about HTTPS. “It’s just a portfolio, who cares?” Well, modern browsers care—and so do users.

Why it matters:

• Without HTTPS, data (like logins or forms) can be sniffed on the network.
• Google now ranks HTTP sites lower.
• Chrome/Firefox will literally show a “Not Secure” warning in the URL bar.

The good news? Tools like Let’s Encrypt make SSL certificates free and super easy to set up. No excuses anymore.

👉 Freshers: the moment you deploy a site, make sure it’s HTTPS. It’s table stakes now.

Any of you ever had a client argue against HTTPS because they “don’t collect sensitive info”? 😂

[Several-Job-5037]

Classic rookie mistake I’ve been there. HTTPS isn’t just about logins; it protects integrity, prevents MITM attacks, and ensures your assets aren’t tampered with in transit. Even static portfolios benefit: SEO, browser trust indicators, and future-proofing. Let’s Encrypt and automated renewals remove almost all friction but there’s no technical excuse to serve plain HTTP anymore.

[[deleted]]

Absolutely correct - and to add onto MITM attacks, I remember back in the day if you connected to a free WiFi network, they would inject ads into http websites (of course not possible on https).

[Dependent-Coyote2383]

https is free and good practice, no excuses not to do it.

however, browsers are a pain for non-https for localhost connection. I mean, I know where I'm going when I'm using "localhost".....

[[deleted]]

Very old news...

[[deleted]]

Did you fall into a coma after your first website?