News for hackers. Stuff that matters.

A comment on HTTPS as a ranking signal. Parent comment

Re:HTTPS as a ranking signal by dserodio on Thursday August 07, 2014 @05:22PM (#8150197)
Why? The crypto is just as strong with a self-signed cert as a "name brand" cert. The only downside is teaching users to ignore SSL errors, which is bad.
[ Parent | on HN ]
Re:HTTPS as a ranking signal by cpeterso on Thursday August 07, 2014 @06:44PM (#8150509)
The crypto strength of a self-signed cert is irrelevant because a MITM can generate their own self-signed cert with the your website's name.
[ Parent | on HN ]
Re:HTTPS as a ranking signal by mindcrime on Friday August 08, 2014 @02:01PM (#8154181)
Right, so you have to verify the certificate through some "out of band" (relative to the browswer) mechanism.
[ Parent | on HN ]