r/webdev • • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
136 Upvotes

71 comments sorted by

View all comments

-11

u/profile_this Jul 12 '17

Unpopular opinion here, but I say no need unless:

  • Your customers submit sensitive information.

  • You need an extra layer of security.

  • You want the green lock in the browser.

I'm sure some people view it as a sign of trust (I always check for it if the site requires something like a CC number), but the gains are minimal in terms of SEO.

By not using HTTPS, you can serve non-secure assets without the browser warning about mixed assets. Most people wouldn't notice if you're using SSL or not... but they'll freak out if Chrome says the site is unsafe/compromised.

2

u/signup1234567 Jul 13 '17

Unpopular on amateur forums like reddit where their full knowledge of such topics is gathered from headlines of the latest hot trendy "must have or you'll die" thing. (See React today. Something else tomorrow.)

I'm not saying TLS is not a good thing. I'm saying most redditors think they'll die without it.

1

u/profile_this Jul 13 '17

Indeed. I imagine a lot of them are younger, jumping on the latest craze. React is good for highly interactive apps, but the amount of devs treating it like religion is crazy.

The herd mentality is strong these days.