http://snapper.io/ lacking HTTPS

[tacerus]

Hi,

it would be great if the page was enabled for HTTPS with a respective redirect and a valid certificate.

https://docs.github.com/en/pages/getting-started-with-github-pages/securing-your-github-pages-site-with-https

Best,
Georg

[WaitingAtTheCrossroads]

This really needs to be a priority. It can, and does, happen that random http sites are used as initial attack vector to full system compromise.

The http protocol makes MITM trivial; a bad actor then injects some javascript with a zero-day or two and boom - game over. This should be common knowledge in 2024.

Please stop enabling this, it is irresponsible.