On Dec 23, 2016, at 9:55 AM, Daniel Stenberg <daniel@haxx.se> wrote:

On Fri, 23 Dec 2016, Wheeler, David A wrote:

A project MAY also support HTTP, though we encourage projects to redirect HTTP traffic to HTTPS.

I actually think that in 2017, that is about to start after all, there is *no* and I really mean zero, reasons to not offer all relevant info and services over HTTPS. I don't think there's any room left for a "MAY" do HTTP.

Sure, there are server and hosting offerings that don't give the users HTTPS. That's a perfect reason to NOT use them and NOT host your open source on those services.

I think a 100% best-practices project in 2017 shouldn't have anything significant on HTTP.

--

/ daniel.haxx.se
_______________________________________________
CII-badges mailing list
CII-badges@lists.coreinfrastructure.org
https://lists.coreinfrastructure.org/mailman/listinfo/cii-badges