4 ms·

Also provides heartache and headaches to get working properly.

by overcast 11y ago

r1ch 11y ago
and significantly lower ad revenue for ad-supported sites.
- jimktrains2 11y ago
  How so?
  - nailer 11y ago
    Some of the ad networks don't have https support yet. Though this is really the fault of the ad networks, and since they want customers, will probably be resolved soon.
    - tomjen3 11y ago
      That honestly sound like they aren't interested in being in business for long then. I mean how can you not have SSL support when the major businesses will be your customers?
    - cpeterso 11y ago
      The IAB is promoting a "LEAN" ads: Light, Encrypted, Ad choice supported, Non-invasive ads. Given that all of these recommendations go against the current trajectory of advertising, I doubt they will be adopted any time soon. http://www.iab.com/news/lean/ http://www.iab.com/news/lean/
lorenzhs 11y ago
It's easy to get a good configuration for popular servers from https://mozilla.github.io/server-side-tls/ssl-config-generator/ https://mozilla.github.io/server-side-tls/ssl-config-generat... and certificates are really easy to get from Let's Encrypt, both with the official client or others such as acme-tiny or simp_le if you don't like the official one. Headaches are not an excuse any more.
jimktrains2 11y ago
How is HTTPS difficult to set up?
- evan121 11y ago
  With AWS's new certificate manager it makes about 3 clicks and 2 minutes. Otherwise I agree, it's a pain in the ass.
  - cyphar 11y ago
    It takes about 10 minutes to update nginx's configurations to use sane defaults with TLS and CSP to boot.
    - evan121 11y ago
      Fair point. I usually terminate on an ELB.
jrapdx3 11y ago
I can only add to the chorus here. Recently used LE to generate certs for my servers running on FreeBSD, which to date is really only semi-supported by LE. To my surprise, getting certs was quite easy. Just needed to run the LE utility, answer a few questions, like the domains to be included, and that was it. Took a few seconds at most. The only other task was pointing nginx servers to the LE certs location, edited the config files in a minute or so. Of course that only needs to be done one time. Using the early-stage LE tools is already quite painless, I expect fully automating the process will be developed in the coming months. But even with the "primitive" tools available now, it's hardly a burden spending a few seconds every 3 months to get the tremendous benefit provided.
- rogeryu 11y ago
  And you can (should) probably set up a cron job to do that every 2 months!

Also provides heartache and headaches to get working properly.

r1ch 11y ago

and significantly lower ad revenue for ad-supported sites.

jimktrains2 11y ago
How so?
- nailer 11y ago
  Some of the ad networks don't have https support yet. Though this is really the fault of the ad networks, and since they want customers, will probably be resolved soon.
  - tomjen3 11y ago
    That honestly sound like they aren't interested in being in business for long then. I mean how can you not have SSL support when the major businesses will be your customers?
  - cpeterso 11y ago
    The IAB is promoting a "LEAN" ads: Light, Encrypted, Ad choice supported, Non-invasive ads. Given that all of these recommendations go against the current trajectory of advertising, I doubt they will be adopted any time soon. http://www.iab.com/news/lean/ http://www.iab.com/news/lean/

lorenzhs 11y ago

It's easy to get a good configuration for popular servers from https://mozilla.github.io/server-side-tls/ssl-config-generator/ https://mozilla.github.io/server-side-tls/ssl-config-generat... and certificates are really easy to get from Let's Encrypt, both with the official client or others such as acme-tiny or simp_le if you don't like the official one. Headaches are not an excuse any more.

jimktrains2 11y ago

How is HTTPS difficult to set up?

evan121 11y ago
With AWS's new certificate manager it makes about 3 clicks and 2 minutes. Otherwise I agree, it's a pain in the ass.
- cyphar 11y ago
  It takes about 10 minutes to update nginx's configurations to use sane defaults with TLS and CSP to boot.
  - evan121 11y ago
    Fair point. I usually terminate on an ELB.

jrapdx3 11y ago

I can only add to the chorus here. Recently used LE to generate certs for my servers running on FreeBSD, which to date is really only semi-supported by LE. To my surprise, getting certs was quite easy. Just needed to run the LE utility, answer a few questions, like the domains to be included, and that was it. Took a few seconds at most. The only other task was pointing nginx servers to the LE certs location, edited the config files in a minute or so. Of course that only needs to be done one time. Using the early-stage LE tools is already quite painless, I expect fully automating the process will be developed in the coming months. But even with the "primitive" tools available now, it's hardly a burden spending a few seconds every 3 months to get the tremendous benefit provided.

rogeryu 11y ago
And you can (should) probably set up a cron job to do that every 2 months!