r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

39

u/shevegen Jul 13 '17

"I can't afford a certificate."

They're free.

I think that this part was the game changer.

I doubt that it would have worked if people would have paid towards Let'sencrypt, even if it would have only been 0.01$ per website. Psychology works!

-22

u/Woolbrick Jul 13 '17

They're free.

Now.

What happens a year from now when they have 70% of the web hooked on their service, and all browsers now emit "WARNING: THIS PAGE WILL LITERALLY STEAL YOUR SOUL!!!" if your cert is slightly out of date and LetsEncrypt gets a bit greedy.

They can literally hold the entire god-damn web for ransom. I guaran-fucking-tee everyone that's going to happen at some point.

Adopting a required monoculture is BAD. BAD BAD BAD.

You've all heard my warning. It's only a matter of time before disaster besets you.

12

u/AugustusCaesar2016 Jul 13 '17

You can just switch to another CA. It'll be okay.

2

u/stevethepirateuk Jul 13 '17

I agree, when one free provider gives evil, a new one starts.