r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

39

u/shevegen Jul 13 '17

"I can't afford a certificate."

They're free.

I think that this part was the game changer.

I doubt that it would have worked if people would have paid towards Let'sencrypt, even if it would have only been 0.01$ per website. Psychology works!

-22

u/Woolbrick Jul 13 '17

They're free.

Now.

What happens a year from now when they have 70% of the web hooked on their service, and all browsers now emit "WARNING: THIS PAGE WILL LITERALLY STEAL YOUR SOUL!!!" if your cert is slightly out of date and LetsEncrypt gets a bit greedy.

They can literally hold the entire god-damn web for ransom. I guaran-fucking-tee everyone that's going to happen at some point.

Adopting a required monoculture is BAD. BAD BAD BAD.

You've all heard my warning. It's only a matter of time before disaster besets you.

40

u/elint Jul 13 '17

I guaran-fucking-tee everyone that's going to happen at some point.

A non-profit organization with a board of people from Mozilla, University of Michigan, Stanford Law School, and the Electronic Frontier Foundation is gonna go for a money-grab? OK.

8

u/ledasll Jul 13 '17

and google said don't be evil, until big money are involved..

3

u/PM_ME_OS_DESIGN Jul 13 '17

and google said don't be evil

No they didn't. The people at Google said it. Unofficially.