Re:HTTPS is more secure, so why isn't the Web using it?
by mukyu on Monday March 21, 2011 @11:30AM
(#2350134)
That is key continuity.
It works for ssh because you generally know the parties you are trying to connect to ahead of time and have ways to communicate with them (to confirm keys etc).
You do not have the same relationship with 99.99% of the servers you will be connecting to over https. It does not work.
Re:HTTPS is more secure, so why isn't the Web using it?
by rwmj on Monday March 21, 2011 @02:18PM
(#2350929)
Actually I don't visit webservers with a uniform random distribution. I come back to some frequently (eg. my bank, HN, BBC News, ...) Maybe that's just me though.
It works for ssh because you generally know the parties you are trying to connect to ahead of time and have ways to communicate with them (to confirm keys etc).
You do not have the same relationship with 99.99% of the servers you will be connecting to over https. It does not work.