Hacker News new | past | comments | ask | show | jobs | submit login

They also stopped allowing NSFW content to appear on the front page of r/all.



You also can't view NSFW content without being logged in any longer.


You can with old.reddit.com


For now.

Reddit's currently working on a UI/UX update for moderators on new.reddit (or newnew reddit as I like to call it since it's technically a second redesign) with an ETA of early 2024 [1]. According to them last year, 4% of users use old.reddit but carry out 60% of all moderating actions [2].

My guess is once that rolls out, they'll be ready to retire old.reddit.

The UI will live on though. There's mlmym [3] that allows you to use the interface on Lemmy. The instance of Lemmy I use has it on https://old.lemmy.world

[1] https://old.reddit.com/r/modnews/comments/15rxkbn/announcing...

[2] https://old.reddit.com/r/reddit/comments/v3frc1/what_were_wo...

[3] https://github.com/rystaf/mlmym


Which afaik has an expired certificate. Let's not act like anyone outside the hn and og reddit bubble uses it


It hardly matters that the cert is expired if you're not logging in. Contrary to popular belief, TLS is not beneficial for sites where you aren't sharing secret data.


> Contrary to popular belief, TLS is not beneficial for sites where you aren't sharing secret data.

I wish this meme would die.

Integrity is still important for non-secret data.

Confidentiality is important for data which may be considered secret in some contexts but not others.


What are the negative effects of questionable integrity of Reddit textual content?


Injecting malicious scripts, malicious links, spam, advertising, misinformation, or other harmful content such that it appears to the user to have been served from a trusted domain.


Can't a "trusted" domain itself, i.e. one with a non-expired cert, do all that shit just as well as a "non-trusted" one? AIUI, the cert only confirms that you are who you say you are, not that you're a good guy. I mean,are you saying Facebook doesn't have a cert, or that it doesn't have spam and advertising?


It's beneficial for all the other sites if non-secret data is TLS-encrypted, though. If I want to ban secrets, and HTTPS is only used for secrets, I can just ban TLS; but if HTTPS is used for most of the web, I have to ban most of the web (and such a ban will never last long).

Additionally, metadata such as browser history can reasonably be considered a secret: TLS helps protect that somewhat.


Seems fine for me.

  Common Name (CN) \*.reddit.com
  Organization (O) REDDIT, INC.
  Organizational Unit (OU) <Not Part Of Certificate>
  
  Issued On Thursday, August 31, 2023 at 8:00:00 PM
  Expires On Wednesday, February 28, 2024 at 6:59:59 PM




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: