News for hackers. Stuff that matters.

A comment on How a banner ad for H&R Block appeared on Apple.com without Apple’s OK. Parent comment

Re:How a banner ad for H&R Block appeared on Apple.com witho... by kevinpet on Monday April 08, 2013 @12:48PM (#5512824)
HTTPS is not rigid and costly for a single connection. It's rigid and costly because it prevents simple options for caching like sharing google hosted jquery. You can still use a CDN, but then you have more complexity in managing your certificates and pay 1/3 more (Cloudfront pricing).

HTTPS is manageable where needed for security. Sleazy ISPs are making it necessary even where security is not a concern -- for example, viewing Apple's homepage.

[ Parent | on HN ]
Re:How a banner ad for H&R Block appeared on Apple.com witho... by cmelbye on Monday April 08, 2013 @01:07PM (#5512966)
That's not true. Google seamlessly supports both HTTP and HTTPS, and many other sites do too through simply using // as the protocol.
[ Parent | on HN ]
Re:How a banner ad for H&R Block appeared on Apple.com witho... by driverdan on Monday April 08, 2013 @02:41PM (#5513622)
Using 3rd party CDNs, like Google Hosted Libraries, are often slower anyway.

http://www.stevesouders.com/blog/2013/03/18/http-archive-jqu...

[ Parent | on HN ]
Re:How a banner ad for H&R Block appeared on Apple.com witho... by iy56 on Monday April 08, 2013 @01:19PM (#5513037)
They are not making it necessary, only convenient. You're not harmed by seeing a few ads.
[ Parent | on HN ]
Re:How a banner ad for H&R Block appeared on Apple.com witho... by brandon272 on Monday April 08, 2013 @01:23PM (#5513062)
This point of view assumes that the injected code is harmless and never causes compatibility issues when viewing a website. The moment a JavaScript conflict occurs and Apple loses a sale or the ability to buy a product online is hindered, I think that there will be parties who certainly feel they are being "harmed" by this process of manipulating the content being delivered to end users.
[ Parent | on HN ]
Re:How a banner ad for H&R Block appeared on Apple.com witho... by iy56 on Monday April 08, 2013 @01:37PM (#5513155)
Yes, this technique could potentially be misused. You can say the same thing about any technology.
[ Parent | on HN ]