News for hackers. Stuff that matters.
Re:Login Forms Over HTTPS, Please by eterm on Friday January 29, 2016 @01:00PM (#10997025)
This is because most people are browsing and not buying, so the caching advantages of unsecured catalogue pages is likely quite large.

At least for most of those the login is a separate protected page rather than a https iframe.

Re:Login Forms Over HTTPS, Please by Pharaoh2 on Friday January 29, 2016 @02:14PM (#10997690)
Uhh, what caching advantage are you talking about? Everything that can be served cached over HTTP can also be served cached over HTTPS. Unless you are talking about a caching proxy outside of the website control. In that case, they aren't needed, CDNs solved that problem in a much better way.
Re:Login Forms Over HTTPS, Please by toomuchtodo on Friday January 29, 2016 @03:40PM (#10998329)
> Unless you are talking about a caching proxy outside of the website control. In that case, they aren't needed, CDNs solved that problem in a much better way.

There are still parts of the world where caching proxies are used to conserve limited transit bandwidth; CDNs don't solve that.

Re:Login Forms Over HTTPS, Please by paulddraper on Saturday January 30, 2016 @12:16AM (#11000631)
"Everything that can be served cached over HTTP can also be served cached over HTTPS. "

Only if you're taking about a browser cache. Any other cache couldn't intercept the data and cache it without alerting the browser (unless you mess around with installing SSL certs).

Re:Login Forms Over HTTPS, Please by saurik on Friday January 29, 2016 @01:25PM (#10997254)
I wonder if even simply the overhead of setting up and encrypting the secure connections even just by itself has a measurable effect on people's buying behavior.
Re:Login Forms Over HTTPS, Please by ams6110 on Friday January 29, 2016 @06:53PM (#10999517)
Yes but the "login" link, the "add to cart" link, etc. is all served over http so could be replaced by a MITM.