3 ms·

I'm sorry, but can you walk me there? I know very little about how Google ads work. If I buy an ad from Google, I supply my own URL, which can be http or http

by dimino 10y ago

I'm sorry, but can you walk me there? I know very little about how Google ads work. If I buy an ad from Google, I supply my own URL, which can be http or https, and if my site is https it can't display the http ad?

detaro 10y ago
Browsers do not allow content that is delivered over HTTP to be loaded in sites that use HTTPS. If your site wants to display an ad, Google figures out who is willing to pay the most for the spot and includes content from that ad buyer in your site. If your site uses HTTPS, Google can only choose between ad buyers that provide their ads over HTTPS, since those using HTTP wouldn't be displayed.
pests 10y ago
No, its that sites served over HTTPS won't show HTTP-only ads. Google determines who gets the view based on a auction system. Limiting supply of ads limits competitive bidding.
- cpeterso 10y ago
  So Google does not serve the ads from its own servers? Google just runs the programmatic auction and then lets the winning advertiser point to whatever slow, non-HTTPS ad server they like? I guess once Google gets paid by the auction winner, they don't care what happens next with the served ad. And serving it from their own servers would just be an extra cost.
  - tombrossman 10y ago
    No, they don't actually serve all ads. I imagine they know not to pass off a request from a HTTPS page to a HTTP-only server (mixed-content blocking would give a near-100% failure rate) but here is an example of Google's Doubleclick network being used to spread malware: https://blog.malwarebytes.org/threat-analysis/2014/09/googles-doubleclick-ad-network-abused-once-again-in-malvertising-attacks/ https://blog.malwarebytes.org/threat-analysis/2014/09/google...
  - mtgx 10y ago
    I think it can do both. Kind of like how Amazon sells products that ship both from its own warehouses, but also from the vendors directly. But just like with Amazon, there's probably an increasing amount of ads that come directly from the vendors.
  - dimino 10y ago
    This is what surprised me, I assumed Google ran all ads through their own servers.
tacon 10y ago
Doesn't this translate into cheaper clicks for the savvy advertisers bidding HTTPS (only)?
- andyjdavis 10y ago
  It does sound like it. If the publisher is getting paid less for the same number of clicks that means an advertiser is paying less for those clicks. It would be interesting to see this broken down from the advertiser side.

by dimino 10y ago

detaro 10y ago

Browsers do not allow content that is delivered over HTTP to be loaded in sites that use HTTPS. If your site wants to display an ad, Google figures out who is willing to pay the most for the spot and includes content from that ad buyer in your site. If your site uses HTTPS, Google can only choose between ad buyers that provide their ads over HTTPS, since those using HTTP wouldn't be displayed.

pests 10y ago

No, its that sites served over HTTPS won't show HTTP-only ads. Google determines who gets the view based on a auction system. Limiting supply of ads limits competitive bidding.

cpeterso 10y ago
So Google does not serve the ads from its own servers? Google just runs the programmatic auction and then lets the winning advertiser point to whatever slow, non-HTTPS ad server they like? I guess once Google gets paid by the auction winner, they don't care what happens next with the served ad. And serving it from their own servers would just be an extra cost.
- tombrossman 10y ago
  No, they don't actually serve all ads. I imagine they know not to pass off a request from a HTTPS page to a HTTP-only server (mixed-content blocking would give a near-100% failure rate) but here is an example of Google's Doubleclick network being used to spread malware: https://blog.malwarebytes.org/threat-analysis/2014/09/googles-doubleclick-ad-network-abused-once-again-in-malvertising-attacks/ https://blog.malwarebytes.org/threat-analysis/2014/09/google...
- mtgx 10y ago
  I think it can do both. Kind of like how Amazon sells products that ship both from its own warehouses, but also from the vendors directly. But just like with Amazon, there's probably an increasing amount of ads that come directly from the vendors.
- dimino 10y ago
  This is what surprised me, I assumed Google ran all ads through their own servers.

tacon 10y ago

Doesn't this translate into cheaper clicks for the savvy advertisers bidding HTTPS (only)?

andyjdavis 10y ago
It does sound like it. If the publisher is getting paid less for the same number of clicks that means an advertiser is paying less for those clicks. It would be interesting to see this broken down from the advertiser side.