Re:A basic guide to when and how to deploy HTTPS
by mcherm on Saturday December 21, 2013 @07:16PM
(#6948717)
Thank you. I came here to say this.
Reasons NOT to use SSL:
* Server is not powerful enough to handle the extra compute load -- SOLUTION: go buy a server made in the past decade.
* Certificate costs too much -- SOLUTION: go get a free one.
* You hope caching will reduce the load on your servers -- SOLUTION: pay for a CDN or use bittorrent for distribution. Mostly, mid-network caching doesn't happen anyway.
That leaves just one reason:
* You want 3rd world spy agencies and hackers to be able to snoop on and hack your customers just like the NSA can.
Reasons NOT to use SSL:
* Server is not powerful enough to handle the extra compute load -- SOLUTION: go buy a server made in the past decade.
* Certificate costs too much -- SOLUTION: go get a free one.
* You hope caching will reduce the load on your servers -- SOLUTION: pay for a CDN or use bittorrent for distribution. Mostly, mid-network caching doesn't happen anyway.
That leaves just one reason:
* You want 3rd world spy agencies and hackers to be able to snoop on and hack your customers just like the NSA can.