News for hackers. Stuff that matters.

A comment on EFF: How to Deploy HTTPS Correctly. Parent comment

Re:EFF: How to Deploy HTTPS Correctly by mootothemax on Tuesday November 16, 2010 @06:01PM (#1912098)
I wish I could uprate you with more than one vote.

Seriously, https performance sucks from start to finish. If the average user doesn't care about https, but does care about performance, who are they going to go with - you or your faster competitor?

[ Parent | on HN ]
Re:EFF: How to Deploy HTTPS Correctly by cookiecaper on Wednesday November 17, 2010 @02:54AM (#1913375)
Probably depends on if their account gets hijacked at your site or the site of your fastest competitor.

I agree that anonymous or non-logged-in activity has no need of HTTPS, but anything that's transferring cookies, passwords, or other important user or session information should be HTTPS.

[ Parent | on HN ]