Ask PG: Make the login form available over HTTPS only?

Re:Ask PG: Make the login form available over HTTPS only? by dutchbrit on Monday July 23, 2012 @05:14AM (#4280187)

I actually wanted to bring this up a while back too, but it could cause some big issues (forcing SSL in general that is). I wouldn't force all of HN over SSL, but I would make it a lot clearer to users when logging in, if they are logging in over SSL or not (maybe a large text saying click here to log in over SSL? Even though it might look a bit crappy). Or creating filters for IP's that force SSL for certain countries.

Iran for instance blocked all SSL sites a while back, not sure if this is still the case however..

See http://news.ycombinator.com/item?id=3575029

[ Parent | on HN ]

Re:Ask PG: Make the login form available over HTTPS only? by zader on Monday July 23, 2012 @05:40AM (#4280239)

What are the "big issues" that would be caused by forcing SSL? It sounds like visitors from Iran (and other countries that block SSL sites) might be unable to access HN. What else?

(To clarify, I'm interested in the general topic of whether it's a good idea to have all-SSL websites.)

[ Parent | on HN ]

Re:Ask PG: Make the login form available over HTTPS only? by dutchbrit on Monday July 23, 2012 @05:57AM (#4280273)

Well, when I said big issues, the only actual issue that came to mind for me was Iran. I'm not aware of any other issues it could cause - would be interested in knowing more about this too, what else could theoretically go wrong?

[ Parent | on HN ]

Re:Ask PG: Make the login form available over HTTPS only? by julien_c on Monday July 23, 2012 @08:50AM (#4280650)

Web server performance?

[ Parent | on HN ]