I regret to inform you (again) that Dave Winer is still wrong.

http://scripting.com/2026/04/05/130334.html?title=theDiscourseAboutWordpress

The discourse about WordPress

Dave Winer, OG blogger, podcaster, developed first apps in many categories. Old enough to know better. It's even worse than it appears.

Scripting News
@ianbetteridge Who doesn't use HTTPS in 2026?
@jautero I mean, even I, a n00b, use https.

@ianbetteridge @jautero

I have an HTTP server. It's sitting just over the other side of the room at the moment, having recently been moved away from pride of place next to my left elbow.

Mind you, I don't put the massive attack surface of bloody WordPress on it.

It does GOPHER, too.

It's #djbwares httpd, and gopherd, and geminid come to that. All static. All readonly. Running on NetBSD.

Just for kicks, I made the WWW pages downloadable over the FINGER and NICNAME protocols too.

And I usually edit its pages in #NeoVIM. (-:

@jautero @ianbetteridge I'm not saying I agree with the contents of the article. But I assume the https thing is a mistake. He uses https everywhere else including the domain I see him most often promoting. https://daveverse.org/2026/04/05/the-discourse-about-wordpress/

That said, I'm not sure https is necessary for every case especially now. What's more likely, a mitm attack on recipe site to change the ingredients' weights or an AI incorrectly parroting the contents?

No business should be without https though.

The discourse about WordPress

I love all the new discourse about WordPress. It was so quiet until this week, now I'm getting a much better view of the landscape. I started developing seriously around WordPress almost three…

daveverse

@fds @jautero @ianbetteridge

It's not a mistake.

https://this.how/googleAndHttp/

I wouldn't characterize HTTPS as solely a Google thing, myself.

But yes, as someone with an HTTP site, I can report that the bigger problem today is as you say #AI companies and their scrapers, not man-in-the-middle attacks. In fact, I've never suffered from the latter in quarter of a century. Whereas the scrapers and automated attacks are constant.

For examples:

Within the past couple of minutes, according to my logs, someone in AS8075 has attempted 130 WordPress vulnerability attacks on my HTTP machine. (For some reason, the attacker is using #Scunthorpe in the host name of the URLs. I kid you not.)

The large number of low-speed scrapers are a constant presence. And the last high-speed scraper was someone also from AS8075 who downloaded 210 pages from a single subdirectory in ~100 seconds on Good Friday afternoon.

#http

Google and HTTP

Google is a guest on the web, as we all are. Guests don't make the rules.

@ianbetteridge As someone who is forced to use WordPress to support friends, I couldn't agree more with you, and not with Dave.
@paulehoffman It's just a mess at this point. The idea that it's somehow the centre of the social web is... well. No. Just no.
@ianbetteridge Dave Winer convinced that whatever thing he is currently doing is the future of the web and human communication, film at 11.
@Meyerweb The funny thing is, I really do like Dave. But the thing I like is the way he just sails past being wrong about something in quite a sweet way. And he is wrong so much.