Google to prioritise secure websites • Hacker News Board

Re: Google to prioritise secure websites

#41

Post by agwa » Thu, Aug 07, 2014, 3:35 PM UTC

corobo wrote: post #33

agwa wrote: post #12

Earlier quoted context omitted.

> We're on track to roll out SSL for all CloudFlare customers by mid-October. When we do, the number of sites that support HTTPS on the Internet will more than double To be secure, won't this require your customers to set up HTTPS between CloudFlare and their hosting providers, which will require additional manual setup with their hosting provider, assuming they even support HTTPS? It seems rather optimistic to assum…

You can use a self signed cert between CloudFlare and your server by the looks of it. The optimistic point though I agree on. Hopefully there's some way of telling if your traffic from CF to origin is secure. Wouldn't want the next big community to be fake-secure to save a few quid Source: https://support.cloudflare.com/hc/en-us/articles/200170416-W...

Thanks for the link. I'm really surprised by the presence of the "flexible" option since it provides little more than a facade of security. (A self-signed cert is also insecure, though less so, unless there's some way to pin it on the CloudFlare side.)

Re: Google to prioritise secure websites

#42

Post by diafygi » Thu, Aug 07, 2014, 3:39 PM UTC

dhimes wrote: post #38

diafygi wrote: post #3

Good. Also, I recently poked the bear on the chromium and mozilla dev security mailing lists, and they started discussing ways to push https in the browser UI. Hopefully this momentum continues! https://groups.google.com/a/chromium.org/forum/m/#!topic/sec...

I disagree. It's not that I don't think that secure websites are preferable, but instead I see Google's growing influence being able to shape the web the way Google wants it to be, and them being perfectly willing to use that influence. You can argue that the things they are doing now are making the web better. But are we assured that this will always be the case? What happens if this influence turns completely and m…

I would think in this instance that this is not just a Google opinion. It is now becoming a Best Practice[1].

[1] - http://tools.ietf.org/html/rfc7258

Re: Google to prioritise secure websites

#43

Post by fiatjaf » Thu, Aug 07, 2014, 5:37 PM UTC

> "For now it's only a very lightweight signal - affecting fewer than 1% of global queries, and carrying less weight than other signals such as high-quality content - while we give webmasters time to switch to HTTPS," Google's Zineb Ait Bahajji and Gary Illyes said in the blog post.

Later, high-quality content will be carrying less weight than HTTPS.

Who knows what comes next.

Re: Google to prioritise secure websites

#44

Post by dhimes » Thu, Aug 07, 2014, 6:07 PM UTC

diafygi wrote: post #42

dhimes wrote: post #38

Earlier quoted context omitted.

I disagree. It's not that I don't think that secure websites are preferable, but instead I see Google's growing influence being able to shape the web the way Google wants it to be, and them being perfectly willing to use that influence. You can argue that the things they are doing now are making the web better. But are we assured that this will always be the case? What happens if this influence turns completely and m…

I would think in this instance that this is not just a Google opinion. It is now becoming a Best Practice[1]. [1] - http://tools.ietf.org/html/rfc7258

But shouldn't page rank be about content?