Switch to HTTPS Now, For Free • Hacker News Board

Re: Switch to HTTPS Now, For Free

#41

Post by r00fus » Wed, Sep 25, 2013, 9:28 PM UTC

bad_user wrote: post #17

handsomeransoms wrote: post #12

Earlier quoted context omitted.

Webfaction enabled SNI on all of their servers in December 2011 [1], which means you no longer need to buy a dedicated IP address to use SSL. In fact, when they made this switch, they switched my server over to SNI automatically and stopped charging me the extra $5/month automatically. Awesome! A small fraction of Internet users on extremely out-of-date system cannot use SNI. If you need to support those users, you w…

Any IExplorer on Windows XP, Safari on Windows XP, Android 2.x, Blackberry, Symbian, Java before 1.7, Windows Mobile up to 6.5 ... the list is quite significant. Depending on your target, you can easily talk about 25% of the traffic.

Safari on Windows isn't even supported anymore. Who uses it?

Re: Switch to HTTPS Now, For Free

#42

Post by doppel » Wed, Sep 25, 2013, 9:30 PM UTC

huhtenberg wrote: post #39

Oh, the sweet irony - > SSL’s not perfect, but we need to make surveillance as expensive as possible immediately followed by - > And hey, bonus: more complete referrer information in Google Analytics Make up your mind already. Are you against the surveillance or for it? You can't really sit with one ass on two chairs. -- (edit) Point being is that if you are pulling the anti-surveillance card, then you shouldn't real…

I wouldn't exactly categorize "everyone can see your data" and "we can now track your movement on our own site" together.

The idea of surveillance, in this case, is that no 3rd parties can snoop on your data. If you are actively using a site, it should be under the assumption that they can and will track anything you do on their site.

Re: Switch to HTTPS Now, For Free

#43

Post by lauriswtf » Wed, Sep 25, 2013, 9:32 PM UTC

ewolf wrote: post #4

Are there any downsides to these free certs? Do they work in all browsers; is there anything that could be better security-wise? If not, than this is exactly what we need to establish HTTPS as the new standard.

I am pretty sure that you can't use them for commercial projects

Re: Switch to HTTPS Now, For Free

#44

Post by lauriswtf » Wed, Sep 25, 2013, 9:32 PM UTC

ewolf wrote: post #4

Are there any downsides to these free certs? Do they work in all browsers; is there anything that could be better security-wise? If not, than this is exactly what we need to establish HTTPS as the new standard.

I am pretty sure that you can't use them for commercial projects

Re: Switch to HTTPS Now, For Free

#45

Post by lauriswtf » Wed, Sep 25, 2013, 9:34 PM UTC

jakobe wrote: post #15

I just recently enabled SSL on my business website. It was anything but simple. First of all, I had to get a dedicated server, because a bunch of other sites were running on the same server, and the hosting company doesn't offer additional IP addresses. Then I wanted to get an SSL certificate. I picked Comodo, because they seemed to offer the cheapest full business validation certificate, but then accidentally bought…

You could have just bought the $7 cert from getssl.me and it would take 2 minutes at most.

Re: Switch to HTTPS Now, For Free

#46

Post by lauriswtf » Wed, Sep 25, 2013, 9:34 PM UTC

jakobe wrote: post #15

I just recently enabled SSL on my business website. It was anything but simple. First of all, I had to get a dedicated server, because a bunch of other sites were running on the same server, and the hosting company doesn't offer additional IP addresses. Then I wanted to get an SSL certificate. I picked Comodo, because they seemed to offer the cheapest full business validation certificate, but then accidentally bought…

You could have just bought the $7 cert from getssl.me and it would take just 2 minutes at most.

Re: Switch to HTTPS Now, For Free

#47

Post by lauriswtf » Wed, Sep 25, 2013, 9:35 PM UTC

jakobe wrote: post #15

I just recently enabled SSL on my business website. It was anything but simple. First of all, I had to get a dedicated server, because a bunch of other sites were running on the same server, and the hosting company doesn't offer additional IP addresses. Then I wanted to get an SSL certificate. I picked Comodo, because they seemed to offer the cheapest full business validation certificate, but then accidentally bought…

You could have just bought the $7 cert from getssl.me and it would take just 2 minutes at most.

Re: Switch to HTTPS Now, For Free

#48

Post by huhtenberg » Wed, Sep 25, 2013, 9:35 PM UTC

doppel wrote: post #42

huhtenberg wrote: post #39

Oh, the sweet irony - > SSL’s not perfect, but we need to make surveillance as expensive as possible immediately followed by - > And hey, bonus: more complete referrer information in Google Analytics Make up your mind already. Are you against the surveillance or for it? You can't really sit with one ass on two chairs. -- (edit) Point being is that if you are pulling the anti-surveillance card, then you shouldn't real…

I wouldn't exactly categorize "everyone can see your data" and "we can now track your movement on our own site" together. The idea of surveillance, in this case, is that no 3rd parties can snoop on your data. If you are actively using a site, it should be under the assumption that they can and will track anything you do on their site.

> no 3rd parties can snoop on your data

And Google is what... ?

Re: Switch to HTTPS Now, For Free

#49

Post by lauriswtf » Wed, Sep 25, 2013, 9:35 PM UTC

jakobe wrote: post #15

I just recently enabled SSL on my business website. It was anything but simple. First of all, I had to get a dedicated server, because a bunch of other sites were running on the same server, and the hosting company doesn't offer additional IP addresses. Then I wanted to get an SSL certificate. I picked Comodo, because they seemed to offer the cheapest full business validation certificate, but then accidentally bought…

You could have just bought the $7 cert from getssl.me and it would take just 2 minutes at most.

Re: Switch to HTTPS Now, For Free

#50

Post by lauriswtf » Wed, Sep 25, 2013, 9:35 PM UTC

jakobe wrote: post #15

I just recently enabled SSL on my business website. It was anything but simple. First of all, I had to get a dedicated server, because a bunch of other sites were running on the same server, and the hosting company doesn't offer additional IP addresses. Then I wanted to get an SSL certificate. I picked Comodo, because they seemed to offer the cheapest full business validation certificate, but then accidentally bought…

You could have just bought the $7 cert from getssl.me and it would take just 2 minutes at most.