3 ms·

Three obvious reasons... Cost to the end user $10-200/year - even more on Heroku($20/month). Configuration/Setup sucks - seriously you are supposed to run a b

Three obvious reasons... Cost to the end user $10-200/year - even more on Heroku($20/month). Configuration/Setup sucks - seriously you are supposed to run a bunch of unix commands, copy something to a server, and the whole process isn't user friendly. Limited end user benefit - A business owner and user up until recently hasn't thought much or cared much about information security outside of online purchases. Until it is cheap/free and once click easy, it won't be everywhere.

0_00_0 11y ago
"Cost to the end user $10-200/year" What? How have you not heard of Let's Encrypt by now?
- drdaeman 11y ago
  There are some issues that are still prevent using their certificates in production¹. For example this one prevents Windows XP clients (not just IE, but anything that uses system X.509 libraries) from connecting: https://github.com/letsencrypt/letsencrypt/issues/1660 https://github.com/letsencrypt/letsencrypt/issues/1660. Still there's WoSign (free for everyone) and StartSSL (free for non-commercial use). ____ ¹) Only where 3-5% of more obscure clients still matter.