Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There will always be "so many http-based websites out there", as long as there's no forcing function. I look forward to the point where browsers start flagging any use of http as insecure; there's a gradual transition in that direction. It won't take too long after that point for http to disappear completely, with some lingering use in specialized or un-upgradeable devices for a while.

I think we're still missing one more ecosystem component to make such a transition successfully, though: free wildcard certificates through Let's Encrypt.



Firefox already marks sites loaded over HTTP with a red slash in the URL bar, at least on the current Aurora channel build.


I thought that was only sites that have a password box on them.


Yeah. It's only when there is a password box on them or requests things like location, notifcations support etc.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: