Why doesn't Hansa's login page use https?

I just upgraded Tails the other day, and when I went to log into Hansa, the TOR browser made a big deal about the sign-in page not being encrypted. Does the nature of the TOR network make using https passe, or should Hansa be using https on their login page. FWIW, I tried to drop an "s" after the "p" in "http," but the page wouldn't load.

Any insight you all have into this would be great.

Thanks!


Comments


[9 Points] diOpAnonMu:

Because no one is going to be able to issue a certificate for Hansa. It makes no difference to get a random self-signed certificate or a lets-encrypt cert, because a phishing site could make one for their own URL.

Hidden services are already encrypted, so HTTPS adds nothing for black market sites.


[6 Points] JohnTSchmitz:

C'mon guys ... in all seriousness ... didn't /u/NicoleLoves just get done posting a reminder that it's no fun being picked on and that it's not nice to tease one another?


[1 Points] deep_touch:

/r/darknetmarketsnoobs