Pushing Left, Like a Boss, Part 5.13 — HTTPS only
The previous article in this series is Part 5.12 Authentication (AuthN), Identity and Access Control.
HTTPS only — for every app, everyone, always.

Now that encryption is fast, and free, and we know the risks of not using it, there is literally no excuse not to use HTTPS only for every application on the Internet. Literally every application, even for static pages that contain no sensitive information.





