3 ms·

Regarding the use of SSL by default, they better require the use of the SSL mode which sends the hostname before the crypto negotiation. Otherwise that's a lot

Regarding the use of SSL by default, they better require the use of the SSL mode which sends the hostname before the crypto negotiation. Otherwise that's a lot of IP addresses required for virtual hosting!

agl 17y ago
We will.
- drusenko 17y ago
  Even so, the current certificate issuing process is lengthy and expensive. Requiring SSL would be a major hit to the mom-and-pop type websites that just want a simple webpage on their own domain for their business. They'd now have to pony up for an SSL cert, which at least doubles the website ownership cost, as well as potentially go through a very complex process to get the certificate issued. It also completely eliminates the possibility of them having a free website on their own domain, unless an easy and free method to obtain an SSL cert becomes available. The gain to them in these circumstances is negligible, if they aren't doing any e-commerce.
  - ams6110 17y ago
    mom and pop brochure sites are not the sort who would be using spdy anyway, they'd just use http.
    - cameldrv 17y ago
      Why? If this is successful, everyone should use it, and the whole web would be faster with default server configuration.