{"action":"created","issue":{"url":"https://api.github.com/repos/krishnasrinivas/wetty/issues/50","repository_url":"https://api.github.com/repos/krishnasrinivas/wetty","labels_url":"https://api.github.com/repos/krishnasrinivas/wetty/issues/50/labels{/name}","comments_url":"https://api.github.com/repos/krishnasrinivas/wetty/issues/50/comments","events_url":"https://api.github.com/repos/krishnasrinivas/wetty/issues/50/events","html_url":"https://github.com/krishnasrinivas/wetty/issues/50","id":133576226,"number":50,"title":"security risks http","user":{"login":"coderofsalvation","id":180068,"avatar_url":"https://avatars.githubusercontent.com/u/180068?v=3","gravatar_id":"","url":"https://api.github.com/users/coderofsalvation","html_url":"https://github.com/coderofsalvation","followers_url":"https://api.github.com/users/coderofsalvation/followers","following_url":"https://api.github.com/users/coderofsalvation/following{/other_user}","gists_url":"https://api.github.com/users/coderofsalvation/gists{/gist_id}","starred_url":"https://api.github.com/users/coderofsalvation/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coderofsalvation/subscriptions","organizations_url":"https://api.github.com/users/coderofsalvation/orgs","repos_url":"https://api.github.com/users/coderofsalvation/repos","events_url":"https://api.github.com/users/coderofsalvation/events{/privacy}","received_events_url":"https://api.github.com/users/coderofsalvation/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-02-14T20:30:10Z","updated_at":"2016-05-06T14:40:13Z","closed_at":null,"body":"I know https is a nobrainer when it comes to security.\r\nBut how likely is it that somewhere somebody is sniffing http websocketpackets for passwords, of a http wetty session running in a docker on some server."},"comment":{"url":"https://api.github.com/repos/krishnasrinivas/wetty/issues/comments/217458325","html_url":"https://github.com/krishnasrinivas/wetty/issues/50#issuecomment-217458325","issue_url":"https://api.github.com/repos/krishnasrinivas/wetty/issues/50","id":217458325,"user":{"login":"TotallyInformation","id":1591850,"avatar_url":"https://avatars.githubusercontent.com/u/1591850?v=3","gravatar_id":"","url":"https://api.github.com/users/TotallyInformation","html_url":"https://github.com/TotallyInformation","followers_url":"https://api.github.com/users/TotallyInformation/followers","following_url":"https://api.github.com/users/TotallyInformation/following{/other_user}","gists_url":"https://api.github.com/users/TotallyInformation/gists{/gist_id}","starred_url":"https://api.github.com/users/TotallyInformation/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TotallyInformation/subscriptions","organizations_url":"https://api.github.com/users/TotallyInformation/orgs","repos_url":"https://api.github.com/users/TotallyInformation/repos","events_url":"https://api.github.com/users/TotallyInformation/events{/privacy}","received_events_url":"https://api.github.com/users/TotallyInformation/received_events","type":"User","site_admin":false},"created_at":"2016-05-06T14:40:13Z","updated_at":"2016-05-06T14:40:13Z","body":"NEVER use http for anything other than a totally open, public information server. Yes, something (rather than someone) will start sniffing.\r\n\r\nHTTPS risks are main about having poor certificate chain checking. Harder to achieve but possible, especially in unreliable wi-fi environments such as coffee shops."}}