News for hackers. Stuff that matters.

A comment on Ask HN: When are we finally going to start defaulting to TLS/SSL?. Parent comment

Re:Ask HN: When are we finally going to start defaulting to ... by toomuchtodo on Wednesday December 18, 2013 @12:37AM (#6926090)
1) Free SSL certificates: http://www.startssl.com/

2) The benefits of SSL far outweigh the inability to serve XP and Android 2.X clients. Use a dedicated IP if you can and its cost-effective, if not, use SNI.

[ Parent | on HN ]
Re:Ask HN: When are we finally going to start defaulting to ... by dangrossman on Wednesday December 18, 2013 @12:40AM (#6926097)
1) Not free for commercial use per their terms of service. You have to use their $59.90+ paid product.

2) No, the benefits of SSL do not "far outweigh" the cost of not being available at all. If 1 in 5 people can't reach your site, it doesn't matter how secure you are. That's about how much of the web you would be shutting out by deploying SNI today.

If those were reasonable choices to make, at least some companies would be making them, but not a single well-known site has done so.

[ Parent | on HN ]