Sometimes I wonder if me going on about pulling in 3rd party stuff on websites being a bad idea is overly strict. But then today I noticed a website I'm involved with has started throwing up HTTP login screens. This because some people who shall remain nameless replaced my light-weight self-contained site with a typical bootstrap, video background and google fonts using atrocity that pulls in images from all over the place. One of those sites (hub.berlin) now requires login, so visitors now get a nice login screen for a random domain thrown in their face.. https://social.umeahackerspace.se/attachment/405881