Valentin Petzel <[email protected]> writes:

> What browser are you using? Rejecting a page without SSL is somewhat
> stupid. For many webpages the only benefit of SSL is that you have a
> certificate that the content is correct. While certainly it would be
> possible to do some man-in-the-middle attack tricking you into having
> Lilypond into executing arbitrary scheme code it is still safe to say
> that most likely SSL does not matter for Lilypond.

PDF files can execute JavaScript, so do many webpages, and the LilyPond
downloads are certainly security-relevant as well.

> But SSL is not free, it requires a bit of computation power. Google
> even once redirectes https to http because the load was too high. So
> if any webpage uses SSL the internet would suddenly require noticably
> more power.

That ship has more or less sailed these days.

-- 
David Kastrup

Reply via email to