W3C home > Mailing lists > Public > www-tag@w3.org > December 2014

Re: Preparing to Publish HTTPS Finding

From: <chaals@yandex-team.ru>
Date: Wed, 24 Dec 2014 04:20:28 +0300
To: Chris Palmer <palmer@google.com>, Melvin Carvalho <melvincarvalho@gmail.com>
Cc: Daniel Appelquist <appelquist@gmail.com>, TAG List <www-tag@w3.org>, Ian Jacobs <ij@w3.org>
Message-Id: <2481419384028@webcorp02f.yandex-team.ru>
22.12.2014, 22:38, "Chris Palmer" <palmer@google.com>:
> On Sun, Dec 21, 2014 at 9:24 AM, Melvin Carvalho
> <melvincarvalho@gmail.com> wrote:
>>  "The annual median per capita [yearly] income in India stood at $616, the
>>  99th position among 131 countries." [1] (Gallup Dec 2013)
>>
>>  So what's the cost of a wildcard SSL certificate (someone quoted $100 in a
>>  previous)?  Is it affordable?
>
> People at that income level need clean water and food, not X.509 certificates.

This is a particularly odious statement.

Often, people at that level could get food and clean water - and more precious bandwidth - if they could compete on a level footing in a low-cost web. Poor people often spend a huge amount of their total income on bandwidth and similar technology. And compared to those of us in the rich part of the world, it is often a very careful and very rational choice based on weighing some really serious odds.

Just sayin'

chaals

>>  The finding says that HTTPS will only be needed for new features.  So, are
>>  we moving to a two tier web, where some features are for everyone and and
>>  some are for others?
>
> As has been shown multiple times, there are ways for people to serve
> HTTPS for 0 additional dollars.
>
> We need to avoid a 2-tier web: 1 tier containing the billions of users
> who don't understand that getUserMedia is broadcasting streams from
> their mic and camera over the internet in the clear, and a 2nd tier
> containing the few experts who do understand.
>
> We need a 1-tier web: safe for everyone by default, and easy for users
> to use. The 1-tier web may come at a small price: the relatively small
> # of site operators — experts by definition — may have to learn how to
> use SSLmate or Let's Encrypt or the like.

--
Charles McCathie Nevile - web standards - CTO Office, Yandex
chaals@yandex-team.ru - - - Find more at http://yandex.com
Received on Wednesday, 24 December 2014 01:21:00 UTC

This archive was generated by hypermail 2.3.1 : Wednesday, 7 January 2015 15:33:27 UTC