Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

HTTPS on Your Landing Page Is Important

troyhunt.com

Post reply on HN
Print view View original

171–180 of 307 posts

Re: HTTPS on Your Landing Page Is Important

#171

Post by heartbreak »

Twirrim wrote: post #113
ethbro wrote: post #24

Earlier quoted context omitted.

The important thing for all of us to remember, is that in any given conversation we may be idiot. Until I'm sure the other person doesn't know what they're talking about, I try and assume they're right.

> The important thing for all of us to remember, is that in any given conversation we may be idiot. Alternative take, particularly pertinent to this situation: The person handling twitter is not a technical person, but a customer support person who handles hundreds of dumb questions, day in, day out, from customers who have no clue what they're doing but will often throw technical terms around. Expecting solid techni…

The only expectation was an escalation.

Re: HTTPS on Your Landing Page Is Important

#172

Post by heartbreak »

toomanybeersies wrote: post #132
berbec wrote: post #112

Earlier quoted context omitted.

There is the horrible example of the nice computer company that had called itself by a certain name. [1] They registered their domain in good faith and conducted business. Later, a multi-million dollar car company decided they wanted the domain for the name they choose after Datsun and lawyered up on the mom-and-pop computer company. 1: http://nissan.com/

Well they've made the most of their situation by putting ads on the page. I can also get "complex web design" for $100 per hour from them. Judging by the quality of that site, I might pass.

It’s an old site, looks like an old site, and only recently (last 5 years or so) started running ads. It has been 15 years since the lawsuit was first filed.

Re: HTTPS on Your Landing Page Is Important

#174

Post by dazc »

logingone wrote: post #51

Natwest is RBS - there is no point interacting with them - useless. Same with many UK household names, once they reach a certain size you are not a person and what's in your head is of no interest to anyone.

This can, sometimes, work in you favour though since it is possible to get a county court judgement against these organisations for trivial reasons because the original claim isn't responded to.

Re: HTTPS on Your Landing Page Is Important

#175

Post by dazc »

JepZ wrote: post #64

Well, the bank seems to be stuck in the past... 10 years ago it was best practice for ecommerce shops to serve non sensitive pages (pages without forms or user data) without HTTPS to reduce the server load (HTTPS connections are a little more expensive than HTTP). Nowadays, even the economical driven ecommerce shops got it that is better to just serve everything via HTTPS. It is very sad to see a bank (which should r…

In the UK there are major ecommerce sites still on HTTP.

Re: HTTPS on Your Landing Page Is Important

#176

Post by toomanybeersies »

heartbreak wrote: post #172
toomanybeersies wrote: post #132

Earlier quoted context omitted.

Well they've made the most of their situation by putting ads on the page. I can also get "complex web design" for $100 per hour from them. Judging by the quality of that site, I might pass.

It’s an old site, looks like an old site, and only recently (last 5 years or so) started running ads. It has been 15 years since the lawsuit was first filed.

It says copyright 2016 on it...

Re: HTTPS on Your Landing Page Is Important

#177

Post by UncleMeat »

blakesterz wrote: post #105
UncleMeat wrote: post #47

Earlier quoted context omitted.

This is bikeshedding. The only users who would be able to distinguish the meaning of "secure" and "private" in their address bar are people who already understand what https is and isn't.

This was an honest question, really. I didn't say I had the right answer, I was wondering why they chose "Secure"

Fair. Its just that this very complaint has been brought up by a number of people asking it dishonestly as a way of discouraging the move towards ssl on all websites. That's why it raises eyebrows.

Re: HTTPS on Your Landing Page Is Important

#178

Post by frik »

toomanybeersies wrote: post #123
cm2187 wrote: post #42

Another lesson is to always host the login section on a sub domain of the company which website you visit. A prime example not to follow is Citibank in Europe. My account is with citibank.co.uk, but when I login to my account I get redirected to online.citi.eu. How do I know that citi.eu belongs to Citibank? I have no relationship with citi.eu, that’s not the website I visited. How do I know I can trust it? Microsoft…

Microsoft's sign in is a real mess, I think in part due to having to make your hotmail login that you made 15 years ago still work, along with the dozens of other services that MS has acquired or integrated. I've had a real shitter of a time trying to login before, with redirect loops, or getting automatically signed out as soon as I sign in. Or accounts being a "games for Windows" account, but not an MS account, or…

Microsoft login is still the very old Hotmail login dating back to 1996 or so. The Hotmail mail and account system got rebranded several times like MSN, Live, Outlook, Microsoft ID, etc.

Well, a login system is a very central part, and other websites suck too, like Amazon still uses the old account login page since 1996 too. But Microsoft redirects way too often, it is worse.

Re: HTTPS on Your Landing Page Is Important

#179

Post by azernik »

bigiain wrote: post #151
toomanybeersies wrote: post #124

Earlier quoted context omitted.

Somewhere, in the background, there's a poor old unix mainframe running Cobol, unaware that the world around it has changed, and that it should put to pasture, where it can live out the rest of its days in peace.

Worse, it's probably an emulation of a Unix mainframe running the original Cobol code - with the emulator running in machine generated JavaScript in Nodejs on AWS... (Obligatory xkcd comic: https://xkcd.com/1926/ )

No, more likely it's a newer IBM mainframe, as those are built to be backwards-compatible with software written back in the 60s.

Re: HTTPS on Your Landing Page Is Important

#180

Post by giancarlostoro »

megy wrote: post #103
nkkollaw wrote: post #18

Earlier quoted context omitted.

And it's so easy for anyone nowadays to get SSL with Let's Encrypt... I remember a few years ago when there was no way you could do it for side projects because certs were 100/yr., now they're free.

It is not easy if you are on a shared domain and it is not supported by your host. Please don't run around saying it is easy for everyone.

I have a shared hosting provider that lets me use Let's Encrypt certs on any of my domains through CPanel even.

For anyone interested :

http://buyshared.net

I'm only a customer for small niche sites, not associated in any other way, works fine enough for my needs.

Post reply on HN