• 2 Posts
  • 47 Comments
Joined 1 year ago
cake
Cake day: July 5th, 2023

help-circle





  • In my opinion, the settings file isn’t where this information should be presented. I would put these notes in the release log and readme and example settings file. I have also written this information to logging during startup so a user knows what to do, or I write a migration that does the change automatically if that’s possible.

    This is only my opinion and you can use the comment method described like //“: “Deprecated” if desired.









  • brettvitaz@programming.devtoPiracy@lemmy.mlBoxing sources
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    6 months ago

    There are several risks. The two most obvious ones are

    • you run the risk of forgetting to use https and everything you are doing is visible to your isp
    • the site admin doesn’t know enough to turn off http so they are probably not securing your data in any meaningful way

    To me it’s an indication that the admin doesn’t know what they’re doing and will likely suffer a data breach eventually