4 ms·

Techcrunch is usually accessed via unencrypted HTTP as a quick search for Techcrunch will show: Google offers the HTTP URL. Techcrunch is hosted on Wordpress VI

by VieElm 12y ago

Techcrunch is usually accessed via unencrypted HTTP as a quick search for Techcrunch will show: Google offers the HTTP URL. Techcrunch is hosted on Wordpress VIP[1] which explains the SSL cert you get. In other words, nothing to see here. [1] http://techcrunch.com/2012/12/13/automattic-launches-wordpress-enterprise-for-custom-company-and-brand-websites-500-per-site-per-month/ http://techcrunch.com/2012/12/13/automattic-launches-wordpre...

Kudos 12y ago
In that case, would they not spent 10 bucks on an SSL cert and redirect to plain?
- deleted 12y ago
  [deleted]
lloydde 12y ago
Here are two contemporaries and WP.com VIP customers that do have their own certs: https://recode.net/ https://recode.net/ https://gigaom.com/ https://gigaom.com/ Here are two that don't: https://qz.com https://qz.com https://pando.com/ https://pando.com/ And one that redirects you from https https://time.com https://time.com Is that last one the best experience if you don't have a cert?
- agwa 12y ago
  > https://time.com https://time.com > Is that last one the best experience if you don't have a cert? Ironically, in order to serve an HTTPS to HTTP redirection, you need a valid cert. Indeed, time.com has a valid cert.
  - taylorbuley 12y ago
    Many ad networks don't work over https. As these news sites are ad-based businesses, unfortunately this forces some bad decisions.
JonathonW 12y ago
Not the best endorsement for Wordpress VIP as a service, though. For what they're paying (and for a service which is specifically targeted at hosting on a non-wordpress.com domain), I'd expect at least that they support SNI to get the correct cert for browsers that support it, if not dedicated IPs so that SSL works everywhere. Sending a *.wordpress.com cert along with an "enterprise" service is sloppy and doesn't really inspire confidence in their product. (Although it does seem to be possible for at least some Wordpress VIP customers-- time.com has a valid cert (but redirects to HTTP), and fivethirtyeight.com has fully working HTTPS. So maybe it's actually techcrunch's issue?)
alexnking 12y ago
Well, they sort of have to be accessed by unencrypted HTTP, their HTTPS certificate gives a huge warning. Any site doing journalism needs to have their SSL setup correctly if they care about the privacy of their readers.

by VieElm 12y ago

Kudos 12y ago

In that case, would they not spent 10 bucks on an SSL cert and redirect to plain?

deleted 12y ago
[deleted]

lloydde 12y ago

Here are two contemporaries and WP.com VIP customers that do have their own certs: https://recode.net/ https://recode.net/ https://gigaom.com/ https://gigaom.com/ Here are two that don't: https://qz.com https://qz.com https://pando.com/ https://pando.com/ And one that redirects you from https https://time.com https://time.com Is that last one the best experience if you don't have a cert?

agwa 12y ago
> https://time.com https://time.com > Is that last one the best experience if you don't have a cert? Ironically, in order to serve an HTTPS to HTTP redirection, you need a valid cert. Indeed, time.com has a valid cert.
- taylorbuley 12y ago
  Many ad networks don't work over https. As these news sites are ad-based businesses, unfortunately this forces some bad decisions.

JonathonW 12y ago

Not the best endorsement for Wordpress VIP as a service, though. For what they're paying (and for a service which is specifically targeted at hosting on a non-wordpress.com domain), I'd expect at least that they support SNI to get the correct cert for browsers that support it, if not dedicated IPs so that SSL works everywhere. Sending a *.wordpress.com cert along with an "enterprise" service is sloppy and doesn't really inspire confidence in their product. (Although it does seem to be possible for at least some Wordpress VIP customers-- time.com has a valid cert (but redirects to HTTP), and fivethirtyeight.com has fully working HTTPS. So maybe it's actually techcrunch's issue?)

alexnking 12y ago

Well, they sort of have to be accessed by unencrypted HTTP, their HTTPS certificate gives a huge warning. Any site doing journalism needs to have their SSL setup correctly if they care about the privacy of their readers.