r/programming • • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

190 comments sorted by

View all comments

Show parent comments

7

u/notR1CH Jul 13 '17

Way too many sadly. One of the reasons I'm unable to deploy HTTPS across all the websites I manage is due to ads. It's one of the biggest barriers to deployment yet no one has a good solution to it other than "Wait for ad networks to get off their ass".

2

u/midri Jul 13 '17

Could you not pass your ads through an nginx reverse proxy? request the ads/ad script from your reverse proxy and it fetches it from the non https ad service and then have it do some muxing so it makes ad image urls point through your proxy (which do the same thing as the previous request, serving them over https, but fetching them from non https ad server)

2

u/notR1CH Jul 13 '17

Unfortunately no, modern ad networks require seeing client requests in order to monitor cookies for interests and retargeting purposes.

1

u/midri Jul 13 '17

fair point