2 ms·
Thanks for the link to HTTPS Everywhere. I recall reading about it at launch, but wanted to understand it better before installing. IIRC, it uses an explicit
by dewitt 14y ago
Thanks for the link to HTTPS Everywhere. I recall reading about it at launch, but wanted to understand it better before installing. IIRC, it uses an explicit whitelist of URLs that redirect from http to their secure equivalent, which gave me pause, as it would seemingly be (theoretically) possible for a malicious party to compromise the whitelist and hijack the redirects. I could be wrong about the technique of course; I just wanted to wait until I investigated the approach first.
Regarding latency, there are many sites, such as www.google.com itself, that achieve low latencies even over SSL. Given the lightweight nature of HN, I imagine it is at least worth the experiment. I'm using https://news.ycombinator.com https://news.ycombinator.com myself right now, and the latency, if any, isn't noticeable. For me anyway.
Thanks again for the pointer to HTTPS Everywhere.