#indieweb 2015-04-25

2015-04-25 UTC

aaronpk the thing i'm struggling with conceptually is that http identities can't really be treated as secure at all, so maybe apps just shouldn't allow non-https logins at all