zlacker

>>abused+(OP)
But there's nothing on this site once you do disable JavaScript. I was hoping for a 2020 take on a server-side rendered web app.

>>aftbit+K2
I see what you did there....

In other news, possibly the best designed website of 2020: http://www.muskfoundation.org/

>>teknop+e3
No HTTPS tho.

>>fastba+g5
It doesn't need https.

>>teknop+Qm
Of course it does. Otherwise intermediaries can inject ads, tracking, spoof the content, or even redirect it to a malicious page.

>>Square+Ao
https does not 100% prevent any of those things.

>>teknop+Wq
How can someone spoof the page/inject ads if the site is served over https?

They would need to have compromised one of the root certificates on your machine to not give you a giant security warning.

In modern browsers there’s not even a button to bypass them (although I know I chrome you can type “this is unsafe” to a hidden input in the error page and it will let you bypass it temporarily).

>>charro+st
MITM - https termination at a gateway or proxy.