3 ms·
I like the idea of information that is public (eg. a blog, as opposed to your activity in your favorite webapp) being easily cached. You might appreciate your
by rlpb 13y ago
I like the idea of information that is public (eg. a blog, as opposed to your activity in your favorite webapp) being easily cached.
You might appreciate your ISP's web proxy cache if you live in New Zealand, for example.
It would be nice if everything magically worked in this case, but I don't think we're really there yet. And I'll admit there's a downside - SSL also buys you data integrity (eg. was the blog post modified in transit?) and you don't get that here.
Still, I'm not convinced about SSL-by-default for general public information websites (with an obvious exception for sensitive health or political sites, etc).
I also don't buy the "protect your readers' privacy" angle. To me, that's "provide your readers an illusion of privacy", since they still have to trust $random_website to not leak the logs they are able to gather. Readers who want identity privacy should use Tor or similar, and not be misled by https-everywhere.
- icebraining 13y agoIt'd be nice if we had a signing mechanism; it could reuse most of the mechanics of SSL encryption (same certs, same algorithms) and it'd provide tampering-proof communications would hindering caching. And it could even be done statically, without requiring more servers resources per request (e.g. as a step during static site generation).