I believe I'm being served tampered content every single time I access HTTP, so the last time that happened coincides with the last time I used a HTTP URL.
Here are two hurdles:
1. Can you prove me wrong?
2. Next, given 1, can you rationally justify not rolling out HTTPS everywhere.
In other words, is it actually a valid argument that "often, nothing bad happens when you use HTTP, so it is okay".
Tampering of content has nothing to do with your privacy; it's a security matter. A nefarious man-in-the-middle could insert content which attacks your browser or redirects it to a malicious site, etc.
That attacker could be on a network close to you, or a network close to the site. It's not a matter of trusting or not trusting the original site that serves the HTTP.
Therefore it doesn't matter that you're just accessing the site as an anonymous visitor without an authenticated account, just viewing public content.
I just mostly mourn all the caching and sharing potential along the way gone in the world where everyone totally needs a private secure tunnel to the very server containing most mundane, public and irrelevant information.
> Tampering of content has nothing to do with your privacy; it's a security matter. A nefarious man-in-the-middle could insert content which attacks your browser or redirects it to a malicious site, etc.
Here are two hurdles:
1. Can you prove me wrong?
2. Next, given 1, can you rationally justify not rolling out HTTPS everywhere.
In other words, is it actually a valid argument that "often, nothing bad happens when you use HTTP, so it is okay".
Tampering of content has nothing to do with your privacy; it's a security matter. A nefarious man-in-the-middle could insert content which attacks your browser or redirects it to a malicious site, etc.
That attacker could be on a network close to you, or a network close to the site. It's not a matter of trusting or not trusting the original site that serves the HTTP.
Therefore it doesn't matter that you're just accessing the site as an anonymous visitor without an authenticated account, just viewing public content.