4 ms·

For small sites it's mostly certificate and dedicated IP price. Wildcard certificates price is especially egregious. For big sites - probably their load balanc

by monort 12y ago

For small sites it's mostly certificate and dedicated IP price. Wildcard certificates price is especially egregious. For big sites - probably their load balancers can't handle the https load.

lorenzhs 12y ago
Dedicated IP? I thought SNI was supported just about everywhere by now. Also, if all you need is a certificate for one subdomain (or maybe a couple of certificates for one subdomain each), a StartSSL certificate is free. It's not SuperDuperSign Extra Validation Plus Platinum, but it's accepted by all major browsers ;) EDIT: Wikipedia tells me "As of November 2012, the only major user bases whose browsers do not support SNI appear to be users of Android 2.x (default browser), Internet Explorer on Windows XP and versions of Java before 1.7 on any operating system." - a small company should be fine.
- Perseids 12y ago
  Remember that this is not about browsers, but about the TLS libraries the calendar software uses. For instance Java only supports SNI since version 7.
  - _delirium 12y ago
    The Python SNI situation was also cleared up very recently, with commits to some of the widely used libraries only happening in mid-2013. I wouldn't be surprised if many installations haven't yet upgraded to those post-2013 versions. See e.g.: https://github.com/shazow/urllib3/pull/156 https://github.com/shazow/urllib3/pull/156
sbarre 12y ago
A wildcard SSL certificate is $250 per year. You can't tell me that this is a prohibitive cost for someone operating a serious business.
- onion2k 12y ago
  For an established business that you know is going to make thousands of dollars in the next year it's trivial, but for a new business with an unknown future it's a pretty big addition. If setting up a new venture had a minimum cost of $250 (rather than being close to $0 as it is now) we'd see fewer side projects and part-time entrepreneurs.
- mikeash 12y ago
  The question was "all website", not merely websites belonging to serious businesses.
- blueskin_ 12y ago
  For a small site is is. SSL certs are basically a cartel. They should work more like the PGP web of trust.
- deleted 12y ago
  [deleted]
- ceejayoz 12y ago
  Wildcards are under $100 at Namecheap, and in most cases a business that can't afford $100/year probably doesn't need a dozen subdomains and can go with the $7/year for www.

by monort 12y ago

For small sites it's mostly certificate and dedicated IP price. Wildcard certificates price is especially egregious. For big sites - probably their load balancers can't handle the https load.

lorenzhs 12y ago

Dedicated IP? I thought SNI was supported just about everywhere by now. Also, if all you need is a certificate for one subdomain (or maybe a couple of certificates for one subdomain each), a StartSSL certificate is free. It's not SuperDuperSign Extra Validation Plus Platinum, but it's accepted by all major browsers ;) EDIT: Wikipedia tells me "As of November 2012, the only major user bases whose browsers do not support SNI appear to be users of Android 2.x (default browser), Internet Explorer on Windows XP and versions of Java before 1.7 on any operating system." - a small company should be fine.

Perseids 12y ago
Remember that this is not about browsers, but about the TLS libraries the calendar software uses. For instance Java only supports SNI since version 7.
- _delirium 12y ago
  The Python SNI situation was also cleared up very recently, with commits to some of the widely used libraries only happening in mid-2013. I wouldn't be surprised if many installations haven't yet upgraded to those post-2013 versions. See e.g.: https://github.com/shazow/urllib3/pull/156 https://github.com/shazow/urllib3/pull/156

sbarre 12y ago

A wildcard SSL certificate is $250 per year. You can't tell me that this is a prohibitive cost for someone operating a serious business.

onion2k 12y ago
For an established business that you know is going to make thousands of dollars in the next year it's trivial, but for a new business with an unknown future it's a pretty big addition. If setting up a new venture had a minimum cost of $250 (rather than being close to $0 as it is now) we'd see fewer side projects and part-time entrepreneurs.
mikeash 12y ago
The question was "all website", not merely websites belonging to serious businesses.
blueskin_ 12y ago
For a small site is is. SSL certs are basically a cartel. They should work more like the PGP web of trust.
deleted 12y ago
[deleted]
ceejayoz 12y ago
Wildcards are under $100 at Namecheap, and in most cases a business that can't afford $100/year probably doesn't need a dozen subdomains and can go with the $7/year for www.