casimir's blog

Why does codeforces not use https?
By casimir, history, 7 years ago, In English

So, I find it very strange that codeforces does not use https. Is there a reason for this?

Or, am I the only one seeing this website in http.

  • Vote: I like it
  • +221
  • Vote: I do not like it

»
7 years ago, # |
  Vote: I like it +5 Vote: I do not like it

I also see CodeForces in http. And I also wonder why it doesn't use https :D.

→ Reply
»
7 years ago, # |
← Rev. 2   Vote: I like it -35 Vote: I do not like it

I think this is a mystery very much, even I can quote " A mystery of codeforces not use https ".

I have three reasons to think that the problem is mystery.

  • https is [ http ] + [ security system ]. So I think hacking is unlikely in https thank http.
  • Google Inc. have a plan of "https everywhere" (see this movie), and there will be slightly increase the ranking of HTTPS URLs in search results in future.
  • Most of online judge uses https, including AtCoder, TopCoder, Hackerrank.

A mystery of codeforces not use https. Sorry for my poor English.
→ Reply
  • »
    »
    7 years ago, # ^ |
      Vote: I like it +11 Vote: I do not like it

    maybe it is performance issue? considering how codeforces lags all the time during contest, having https would probably makes it worse?

    → Reply
    • »
      »
      »
      7 years ago, # ^ |
        Vote: I like it 0 Vote: I do not like it

      maybe make it https when there is no contest in the next 2 hours.

      → Reply
      • »
        »
        »
        »
        7 years ago, # ^ |
        ← Rev. 2   Vote: I like it +13 Vote: I do not like it

        I don't think that make sense. If I am not wrong, the purpose for https is to protect data transfer across the network, so shouldn't it be more important to do it during the contest. Also, people who wants sensitive information can just tap into the network during the contest instead.

        → Reply
        • »
          »
          »
          »
          »
          7 years ago, # ^ |
          ← Rev. 3   Vote: I like it -10 Vote: I do not like it

          That's the point, the site will be so laggy anyway it will be impossible. At least this way is better than never having https.

          → Reply
»
7 years ago, # |
  Vote: I like it +42 Vote: I do not like it

I think the reason behind this is : Codeforces is still Beta !! :D

→ Reply
»
6 years ago, # |
  Vote: I like it +51 Vote: I do not like it

Is there any progress on this issue?

→ Reply
  • »
    »
    6 years ago, # ^ |
      Vote: I like it -38 Vote: I do not like it

    is that an issue?

    → Reply
    • »
      »
      »
      6 years ago, # ^ |
        Vote: I like it +75 Vote: I do not like it

      Indeed it is. Some ISPs may inject ads into HTTP traffic (or add some ad redirections), passwords can be easily intercepted (unless you use OAuth, but it may be not the best option if one uses a shared PC).

      → Reply