News for hackers. Stuff that matters.
Re:Login Forms Over HTTPS, Please by pmarreck on Friday January 29, 2016 @12:38PM (#10996815)
Is there a caching story to tell, here? In other words, is it possible that most web infrastructure is set up in such a way that caching is used to mitigate much of the load on the servers, and moving too many things to HTTPS too quickly would result in a MUCH greater content generation load?
Re:Login Forms Over HTTPS, Please by simonw on Friday January 29, 2016 @12:48PM (#10996899)
That kind of caching is actually extremely rare in my experience. It's difficult to set up for all but the most simple static sites, and since it isn't available by default the vast majority of sites don't bother.

The times I've implemented full-page caching (generally using Varnish) I've set it up so nginx runs in front of Varnish handling SSL termination, which means that I still have SSL support even though I'm serving through a cache.