Hacker News new | past | comments | ask | show | jobs | submit login

Yeah. Still not paying for a cert on my person home-pages just so I can have my own page come up first when people google my (worldwide unique) name.

That page contains static HTML and does not need SSL, and it's not "insecure" just because you may be on a network which MITMs traffic. That makes your network insecure, not my page.

So yeah. Not interesting. Not worth it.




> That makes your network insecure, not my page.

At which hop does it stop being "my" network and starts being "our" network? Your webhost? Your IX? Your country?

You can't shift the responsibility; only you can definitively secure the content coming out of your webpage.


I've just wired you the amount needed to buy an SSL certificate from any of multiple reputable and well-priced providers. You can use the money I sent you to buy a cert from https://letsencrypt.org/ , https://www.startssl.com/Support?v=1 , or https://www.cloudflare.com/plans/ .

If those options aren't enough for you, let me know why and also how to non-vacuously send you money, and I'm happy to buy you a $4.99/year certificate from https://www.ssls.com/ssl-certificates/comodo-positivessl .


Just set mine up for free, today. Letsencrypt.org works great. I recommend the simp_le client.


Yeah, there's really no excuse anymore really. They've made it insanely easy to generate certs.


Please read the article, this isn't about google the search engine, it's about google the browser vendor. Firefox nightly is doing the same already by default.

I'm always wondering if there's a correlation between the relevance of integrity for a site and the relevance of the site itself.


> Still not paying for a cert on my person home-pages

lets encrypt?


That means moving to a webhost and plan which supports SSL. They are usually more expensive. It's not just getting the cert.


> That makes your network insecure, not my page.

Sometimes you NEED to use an insecure network due to censorship (example: Tor or VPN).




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: