3 ms·

Yeah. Still not paying for a cert on my person home-pages just so I can have my own page come up first when people google my (worldwide unique) name. That page

Yeah. Still not paying for a cert on my person home-pages just so I can have my own page come up first when people google my (worldwide unique) name. That page contains static HTML and does not need SSL, and it's not "insecure" just because you may be on a network which MITMs traffic. That makes your network insecure, not my page. So yeah. Not interesting. Not worth it.

gilrain 11y ago
Just set mine up for free, today. Letsencrypt.org works great. I recommend the simp_le client.
- dawnerd 11y ago
  Yeah, there's really no excuse anymore really. They've made it insanely easy to generate certs.
Cpoll 11y ago
> That makes your network insecure, not my page. At which hop does it stop being "my" network and starts being "our" network? Your webhost? Your IX? Your country? You can't shift the responsibility; only you can definitively secure the content coming out of your webpage.
serge2k 11y ago
> Still not paying for a cert on my person home-pages lets encrypt?
- josteink 11y ago
  That means moving to a webhost and plan which supports SSL. They are usually more expensive. It's not just getting the cert.
kpcyrd 11y ago
Please read the article, this isn't about google the search engine, it's about google the browser vendor. Firefox nightly is doing the same already by default. I'm always wondering if there's a correlation between the relevance of integrity for a site and the relevance of the site itself.
geofft 11y ago
I've just wired you the amount needed to buy an SSL certificate from any of multiple reputable and well-priced providers. You can use the money I sent you to buy a cert from https://letsencrypt.org/ https://letsencrypt.org/ , https://www.startssl.com/Support?v=1 https://www.startssl.com/Support?v=1 , or https://www.cloudflare.com/plans/ https://www.cloudflare.com/plans/ . If those options aren't enough for you, let me know why and also how to non-vacuously send you money, and I'm happy to buy you a $4.99/year certificate from https://www.ssls.com/ssl-certificates/comodo-positivessl https://www.ssls.com/ssl-certificates/comodo-positivessl .
lambau 11y ago
> That makes your network insecure, not my page. Sometimes you NEED to use an insecure network due to censorship (example: Tor or VPN).

gilrain 11y ago

Just set mine up for free, today. Letsencrypt.org works great. I recommend the simp_le client.

dawnerd 11y ago
Yeah, there's really no excuse anymore really. They've made it insanely easy to generate certs.

Cpoll 11y ago

> That makes your network insecure, not my page. At which hop does it stop being "my" network and starts being "our" network? Your webhost? Your IX? Your country? You can't shift the responsibility; only you can definitively secure the content coming out of your webpage.

serge2k 11y ago

> Still not paying for a cert on my person home-pages lets encrypt?

josteink 11y ago
That means moving to a webhost and plan which supports SSL. They are usually more expensive. It's not just getting the cert.

kpcyrd 11y ago

Please read the article, this isn't about google the search engine, it's about google the browser vendor. Firefox nightly is doing the same already by default. I'm always wondering if there's a correlation between the relevance of integrity for a site and the relevance of the site itself.

geofft 11y ago

I've just wired you the amount needed to buy an SSL certificate from any of multiple reputable and well-priced providers. You can use the money I sent you to buy a cert from https://letsencrypt.org/ https://letsencrypt.org/ , https://www.startssl.com/Support?v=1 https://www.startssl.com/Support?v=1 , or https://www.cloudflare.com/plans/ https://www.cloudflare.com/plans/ . If those options aren't enough for you, let me know why and also how to non-vacuously send you money, and I'm happy to buy you a $4.99/year certificate from https://www.ssls.com/ssl-certificates/comodo-positivessl https://www.ssls.com/ssl-certificates/comodo-positivessl .

lambau 11y ago

> That makes your network insecure, not my page. Sometimes you NEED to use an insecure network due to censorship (example: Tor or VPN).