4 ms·
I’m no big fan of recent Google, but huge thank you to them for driving a push towards https by default
by option 7y ago
I’m no big fan of recent Google, but huge thank you to them for driving a push towards https by default
- quickthrower2 7y agoThanks to Let's Encrypt too for making it easier and cheap to SSL your site. I now see "http://" http://" and think "that looks dirty, what's their excuse?".
- cameronbrown 7y agoHTTPS has downsides too, let's not kid ourselves.
- quickthrower2 7y agoWhat is the downside of using https over http?
- luizfelberti 7y agoNobody said the downsides were over HTTP. When talking about state sponsored espionage, the glaring downside of HTTPS is PKI and buying into the CA model.
- cameronbrown 7y agoOther than what the sibling posted, which is true, there's an extra round trip for the TLS handshake, which makes a real difference when you're on a horrible 3G connection in a poor country (thankfully HTTP 2.0 fixes a lot of this, but again - complexity). Infra will catch up hopefully but it is a pain point for those who are less well off.