- From: Chris Palmer <palmer@google.com>
- Date: Fri, 22 Aug 2014 10:44:21 -0700
- To: Austin William Wright <aaa@bzfx.net>
- Cc: Ian Melven <ian.melven@gmail.com>, "public-webappsec@w3.org" <public-webappsec@w3.org>
On Fri, Aug 22, 2014 at 6:51 AM, Austin William Wright <aaa@bzfx.net> wrote: > A better solution is to make TLS cheap to setup. Really, really cheap - > because it's not. It's pretty close to as easy and cheap as it can be: http://noncombatant.org/2014/08/20/setting-up-https-is-cheap-and-not-too-hard/ (And, read all the way to the end for the sad story of why my blog is HTTP) It's not as easy as it is for SSH, for sure — but that is because the problem web PKI has to solve is a lot harder: you have to introduce many more clients to the server.
Received on Friday, 22 August 2014 17:44:49 UTC