Jason Barbier wrote: > szs wrote: > > Not for security. > > For privacy. > > It is a read only site, the privacy you seek is breached as soon as > you make a DNS call to openbsd.org
There are still some privacy benefits to using HTTPS. It will confound a lot of simple filtering and monitoring software, and what you're reading on the site is pretty obfuscated. It also helps security on sketchy networks. HTTPS isn't a perfect solution, but it's something. Especially when ISPs are starting to inject beacons into HTTP requests and more closely observe usage. That said, I suspect none of the sysadmins have the time or interest, and that's understandable.