Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google to prioritise secure websites

bbc.co.uk

Post reply on HN
Print view View original

11–20 of 44 posts

Re: Google to prioritise secure websites

#11

Post by thejosh »

jgrahamc wrote: post #8
robert_tweed wrote: post #7

Earlier quoted context omitted.

It's good to see CloudFlare are going to make this free. In planning the launch of my own new site/blog/thing (hopefully launching soon), the one thing that's really stopping me considering SSL isn't the cost of certificates (which can be had for peanuts anyway if you don't care too much which CA you use) it's the ongoing costs and increased server load. Right now, launching without CloudFlare would almost certainly…

Yes, we are going to make SSL certificates available to customers on our free plan for free.

You are? ETA?

Re: Google to prioritise secure websites

#12

Post by agwa »

jgrahamc wrote: post #4

Related: https://news.ycombinator.com/item?id=8146660

> We're on track to roll out SSL for all CloudFlare customers by mid-October. When we do, the number of sites that support HTTPS on the Internet will more than double

To be secure, won't this require your customers to set up HTTPS between CloudFlare and their hosting providers, which will require additional manual setup with their hosting provider, assuming they even support HTTPS? It seems rather optimistic to assume that enough customers can/will do this to result in a doubling of sites supporting HTTPS on the Internet.

Re: Google to prioritise secure websites

#13

Post by jbb555 »

"The decision could encourage more sites to turn on encryption, which makes them less vulnerable to hacking".

What? This is entirely wrong. It makes them more vulnerable to hacking. There is a whole lot more complex software and configuration to get right, and we know SSL doesn't have a great recent history of that....

Of course it help secure the communications which presumably is what they meant but it's 100% wrong with the statement the article actually says.

Re: Google to prioritise secure websites

#14

Post by [deleted] »

jbb555 wrote: post #13

"The decision could encourage more sites to turn on encryption, which makes them less vulnerable to hacking". What? This is entirely wrong. It makes them more vulnerable to hacking. There is a whole lot more complex software and configuration to get right, and we know SSL doesn't have a great recent history of that.... Of course it help secure the communications which presumably is what they meant but it's 100% wrong…

[deleted]

Re: Google to prioritise secure websites

#15

Post by jgrahamc »

thejosh wrote: post #11
jgrahamc wrote: post #8

Earlier quoted context omitted.

Yes, we are going to make SSL certificates available to customers on our free plan for free.

You are? ETA?

That's detailed in the blog post I was linking to above: http://blog.cloudflare.com/google-now-factoring-https-suppor...

To quote it: "Second, at CloudFlare we've cleared one of the last major technical hurdle before making SSL available for every one of our customers -- even free customers. We're on track to roll out SSL for all CloudFlare customers by mid-October."

Re: Google to prioritise secure websites

#16

Post by shawabawa3 »

jbb555 wrote: post #13

"The decision could encourage more sites to turn on encryption, which makes them less vulnerable to hacking". What? This is entirely wrong. It makes them more vulnerable to hacking. There is a whole lot more complex software and configuration to get right, and we know SSL doesn't have a great recent history of that.... Of course it help secure the communications which presumably is what they meant but it's 100% wrong…

If you consider stuff like sniffing cookies to steal sessions as hacking, which most people do, then it's true.

In terms of compromising the server you're right

Re: Google to prioritise secure websites

#18

Post by [deleted] »

jgrahamc wrote: post #8
robert_tweed wrote: post #7

Earlier quoted context omitted.

It's good to see CloudFlare are going to make this free. In planning the launch of my own new site/blog/thing (hopefully launching soon), the one thing that's really stopping me considering SSL isn't the cost of certificates (which can be had for peanuts anyway if you don't care too much which CA you use) it's the ongoing costs and increased server load. Right now, launching without CloudFlare would almost certainly…

Yes, we are going to make SSL certificates available to customers on our free plan for free.

[deleted]

Re: Google to prioritise secure websites

#19

Post by diafygi »

jgrahamc wrote: post #8
robert_tweed wrote: post #7

Earlier quoted context omitted.

It's good to see CloudFlare are going to make this free. In planning the launch of my own new site/blog/thing (hopefully launching soon), the one thing that's really stopping me considering SSL isn't the cost of certificates (which can be had for peanuts anyway if you don't care too much which CA you use) it's the ongoing costs and increased server load. Right now, launching without CloudFlare would almost certainly…

Yes, we are going to make SSL certificates available to customers on our free plan for free.

Nice! Which CA are you using?

Re: Google to prioritise secure websites

#20

Post by diafygi »

jgrahamc wrote: post #8
robert_tweed wrote: post #7

Earlier quoted context omitted.

It's good to see CloudFlare are going to make this free. In planning the launch of my own new site/blog/thing (hopefully launching soon), the one thing that's really stopping me considering SSL isn't the cost of certificates (which can be had for peanuts anyway if you don't care too much which CA you use) it's the ongoing costs and increased server load. Right now, launching without CloudFlare would almost certainly…

Yes, we are going to make SSL certificates available to customers on our free plan for free.

Nice! Which CA are you using?
Post reply on HN