4 ms·
Fair enough, that doesn't sound great. That being said: > Devices likely to be affected by the certificate expiry are those that don’t get updated regularly,
by DigitalNoumena 3y ago
Fair enough, that doesn't sound great.
That being said:
> Devices likely to be affected by the certificate expiry are those that don’t get updated regularly, like embedded systems that are designed not to automatically update or smartphones running years-old software releases. Users running older versions of macOS 2016 and Windows XP (with Service Pack 3) are likely to face issues, along with clients dependent on OpenSSL 1.0.2 or earlier, and older PlayStations that haven’t been upgraded to newer firmware.
Still not convinced we can claim HTTPS should not be used in the general, or in this particular, case.
- chrisjj 3y agoIf priority is maximing viewability for this site, HTTP beats HTTPS.
- DigitalNoumena 3y agoWhy would that be the case? Every modern browser actively discourages visiting HTTP sites so I imagine a non-negligible amount of users decide not to visit the page.
- chrisjj 3y agoThat's a myth. E.g. latest Android Chrome here gives zero discouragement. As is proper.
- DigitalNoumena 3y agoHaha fair enough but I think we digress. I did get the warning when I clicked. The point is I see no evidence why HTTP is better for viewability than HTTPS. I showed there are cases where it’s not. You showed there are cases where it’s irrelevant. But the point remains… when is it worse and is it enough to sacrifice the security benefits?
- chrisjj 3y ago> when is it worse When browser refuses due to invalid cert. Used to be a thing. Do correct me if it is still not. > the security benefits? There are no security benefits for such a site.