launchpad-users team mailing list archive

[Karl Fogel <karl.fogel@xxxxxxxxxxxxx>]

Lukasz Szybalski <szybalski@xxxxxxxxx> writes:
> Hello,
> Could you guys elaborate on why every page on launchpad.net is only
> accessible via https?

Security -- that is, protection from impersonation.  We don't want to
send passwords or user-specific cookies over plaintext http://, because
that might make it possible for someone to impersonate a user, change
that user's personal data, or view to data that only that user should
have access to.

Best,
-Karl