@ericsedge
Unless it's behind nginx. Or served over HTTP3. In which case enjoy patching everything like the rest of the internet 🤣

(also, even static sites should have https, to make sure noone along the path injects malicious JavaScript into it)
@jwz