6 ms·
Another advantage to we masters with money … why? SSL does not come cheap. Certificates have become cheap but you need your own IP, i.e., shared hosting is a p
by chmars 12y ago
Another advantage to we masters with money … why?
SSL does not come cheap. Certificates have become cheap but you need your own IP, i.e., shared hosting is a problem and hosting becomes more expensive. Certificate sellers, hosters etc. on the other hand are certainly happy about these new business opportunities – although we all know that SSL is inherently broken.
OK, probably still better than nothing! :)
- drdaeman 12y ago> but you need your own IP Not anymore, unless you need to support antiquities like IE7 on Windows XP or some ancient Java-based software. SNI works just fine in other cases.
- jahnu 12y agoHere's a list of browsers that support it... http://en.wikipedia.org/wiki/Server_Name_Indication#Browsers_with_support_for_TLS_server_name_indication.5B10.5D http://en.wikipedia.org/wiki/Server_Name_Indication#Browsers...
- nulltype 12y agoExcept with the most popular version of Python
- icebraining 12y agoWorks fine if you use requests, or any other HTTP library which hasn't been left to rot like the one in the 2.x stdlib.
- Wilya 12y agoOut of the box, requests on Python2.7 doesn't support SNI. It is documented, and all you have to do is install additional packages to enable it, but still, that's not automatic.
- dchest 12y agoIt will be available in the future maintenance release http://legacy.python.org/dev/peps/pep-0466/ http://legacy.python.org/dev/peps/pep-0466/
- chmars 12y agoOK, good to know – although there are apparently still some restrictions according to comments by other HN users. SSL is still more expensive, though. For most small content websites (< 500-1000 visitors a day), a shared hosting is sufficient with costs of maybe around 100 USD/year. For SSL, you usually need a more expensive hosting, you have to buy a certificate (OK, available for less than 10 USD if you don't care about it's quality but need mainly browser support without an ugly warning window) and most hosters allow SSL only for one domain in a hosting. Example: Shared hosting with 4 WordPress blogs, SSL is active but only to access the control panel since the hoster allows SSL only for one domain. Costs incl. a cheap SSL certificate: 110 USD/year. All 4 WordPress blogs with SSL, i.e., 4 shared hostings plus 4 cheap SSL certificates: 440 USD/year. (And caching with a Wordpress plugin is probably no longer possible …)
- icebraining 12y agoPositiveSSL Multi-Domain certs allow enterprises and web hosts to secure multiple websites by including up to 100 domains within a single certificate. $29.88/year.
- look_lookatme 12y agoLink? The numbers I see for this service are: "Base certificate costs $165.00 for three domains" "After the third domain, each additional domain costs just $45.00" http://www.positivessl.com/multi_domain_ssl_certificate.php http://www.positivessl.com/multi_domain_ssl_certificate.php
- icebraining 12y agohttps://www.namecheap.com/security/ssl-certificates/comodo/positivessl-multi-domain.aspx https://www.namecheap.com/security/ssl-certificates/comodo/p...
- look_lookatme 12y agoThanks!
- eli 12y agoCheck your own stats before you assume you don't still have Win XP/IE users. I have quite a few.
- dwd 12y agoThe shortage of IPv4 addresses and the horribly slow adoption of IPv6 is a big issue. SNI works fine, but when it doesn't it fails horribly. Apache defaults to the first vhost on an IP which can result in non-SNI clients being redirected to the wrong site. As for XP/IE7 usage, I have a client in an aerospace related industry with most of their customers still on XP/IE7.
- ahf 12y agoI think it would be much nicer if the browser vendors started pushing for DANE + DNSSEC. Together, they are a quite neat combo and we wouldn't have to pay for certificates anymore.
- ldng 12y agoAnd emails too then, no ? Lot of critical information is still transmitted through emails.