4 ms·
I actually wanted to bring this up a while back too, but it could cause some big issues (forcing SSL in general that is). I wouldn't force all of HN over SSL, b
by dutchbrit 14y ago
I actually wanted to bring this up a while back too, but it could cause some big issues (forcing SSL in general that is). I wouldn't force all of HN over SSL, but I would make it a lot clearer to users when logging in, if they are logging in over SSL or not (maybe a large text saying click here to log in over SSL? Even though it might look a bit crappy). Or creating filters for IP's that force SSL for certain countries.
Iran for instance blocked all SSL sites a while back, not sure if this is still the case however..
See http://news.ycombinator.com/item?id=3575029 http://news.ycombinator.com/item?id=3575029
- zader 14y agoWhat are the "big issues" that would be caused by forcing SSL? It sounds like visitors from Iran (and other countries that block SSL sites) might be unable to access HN. What else? (To clarify, I'm interested in the general topic of whether it's a good idea to have all-SSL websites.)