Quote:
Originally Posted by Rillington
Thank you for your reply.
Basically, what you are saying, if I am correct, is that there is no increased risk by just downloading/streaming from a site which does not have https.
|
HTTPS does not guarantee the
contents of the site is safe, nor that the what they do with any data is safe, e.g. storing passwords as plain text.
I could go & create a site now, get a certificate and make sure it's only accessible via HTTPS, and fill it with "dodgy" downloads for you to get, which could then infect your PC.
This is where your anti-virus/anti-malware software & common sense comes into play.
The increased risk of an HTTP only site is that (with the right skills & willing) someone could see anything you put into a form, or see exactly what you are looking at & downloading. HTTPS prevents this as the communications between you & the website are encrypted.
But for any website at all, if you're concerned about downloading anything, simply don't, or search around & try to verify that it's safe.