Re: OpenBSD Foundation on HTTPS

[Tom Atkinson]

Whilst that might seem like a fair argument, what would happen if I man
in the middled your request for the http page? I could easily change the
links to point to my malicious site, and with certificates being so easy
to get, it would be relatively easy to make it look authentic as far as
the "you end up on a secure page" argument goes and, given the quality of
some spearphishing, the appearance of the page as well. Of course, none
of that would be possible if all of the pages were TLS encrypted.
Tom