Live data from Hacker News

Google Will Soon Shame All Websites That Are Unencrypted

motherboard.vice.com

21–30 of 369 posts

Re: Google Will Soon Shame All Websites That Are Unencrypted

#21
post #9

Yeah. Still not paying for a cert on my person home-pages just so I can have my own page come up first when people google my (worldwide unique) name. That page contains static HTML and does not need SSL, and it's not "insecure" just because you may be on a network which MITMs traffic. That makes your network insecure, not my page. So yeah. Not interesting. Not worth it.

> Still not paying for a cert on my person home-pages

lets encrypt?

Re: Google Will Soon Shame All Websites That Are Unencrypted

#22
post #12
post #9

Yeah. Still not paying for a cert on my person home-pages just so I can have my own page come up first when people google my (worldwide unique) name. That page contains static HTML and does not need SSL, and it's not "insecure" just because you may be on a network which MITMs traffic. That makes your network insecure, not my page. So yeah. Not interesting. Not worth it.

Just set mine up for free, today. Letsencrypt.org works great. I recommend the simp_le client.

Yeah, there's really no excuse anymore really. They've made it insanely easy to generate certs.

Re: Google Will Soon Shame All Websites That Are Unencrypted

#24

For Google, it’s not just about providing a secure environment and secure websites. In fact, Google actually has a monetary incentive to get as many websites to move over to HTTPs as possible: convincing website owners to move to HTTPs will help get rid of competing ad networks.

How does it get rid of competing ad networks? Does Google have a monopoly on serving ads over HTTPS?

Re: Google Will Soon Shame All Websites That Are Unencrypted

#25
post #23

Why do we have to go through this whole SSL certificates thing and can't just have a simple, automatically secure, I-do-nothing-and-my-website-is-secure protocol? Seriously though. If secure is the default from now on, why can't it actually be the default?

Because you need to create a public key for the browser to use.

Re: Google Will Soon Shame All Websites That Are Unencrypted

#28
Yes, shame all libraries/swimming pools giving their schedule online without HTTPS. Shame gutenberg project, the documentations for OS, code, your washing machine.

Why would money from libraries gutenberg project, NGOs informations go to more expansive OPEX for web hosting when an information is clearly designed and OK to be public?

And does not require adds or payment.

Google has some godwin point very authoritative views on the internet and the protocols that make me dislike them.

Especially that their business model it is to not pay transit for distributing their contents. Basically every fucking internet users pay the 95th percentile transit to google products even if they don't watch videos on youtube, don't use gmail or else.

These people are like ... catholic priests. Do as I say, not as I act and be good members of the community.

Re: Google Will Soon Shame All Websites That Are Unencrypted

#29

For Google, it’s not just about providing a secure environment and secure websites. In fact, Google actually has a monetary incentive to get as many websites to move over to HTTPs as possible: convincing website owners to move to HTTPs will help get rid of competing ad networks.

How does it get rid of competing ad networks? Does Google have a monopoly on serving ads over HTTPS?

It means your internet provider can't inject ads or profile you based on the content of the sites that you visit. Comcast, AT&T, and Verizon have all done similar: https://certsimple.com/blog/ssl-why-do-i-need-it#4-not-havin...

Re: Google Will Soon Shame All Websites That Are Unencrypted

#30

For Google, it’s not just about providing a secure environment and secure websites. In fact, Google actually has a monetary incentive to get as many websites to move over to HTTPs as possible: convincing website owners to move to HTTPs will help get rid of competing ad networks.

How does it get rid of competing ad networks? Does Google have a monopoly on serving ads over HTTPS?

For one IIRC it kills referer headers and so search engines/ad networks can't build out a graph of where a user was prior. Google OTOH sends the majority of the traffic and it's reach in ads allows it fill in the gaps better than any other network.
Post reply on HN