W3C home > Mailing lists > Public > public-webappsec@w3.org > September 2016

Re: [blink-dev] Must have SSL or dedicated IP address?

From: Joseph Lorenzo Hall <joe@cdt.org>
Date: Mon, 19 Sep 2016 09:18:12 -0400
Message-ID: <CABtrr-WxUxEsQPqsGYZRyehYHKK9fMS0wh4mkwk0w3+75NctXw@mail.gmail.com>
To: Victor Costan <pwnall@chromium.org>
Cc: Christian Trujillo <blessingwave@hotmail.com>, "public-webappsec@w3.org" <public-webappsec@w3.org>, blink-dev <blink-dev@chromium.org>, "security-dev@chromium.org" <security-dev@chromium.org>, "dev-security@lists.mozilla.org" <dev-security@lists.mozilla.org>
The search ranking bump that Google gives for https is so small (currently)
as to not really make a difference... of course, there are a ton of good
reasons to move to https regardless (we'll have some neat materials aimed
at web sysadmins and their bosses later this week). best, How

On Friday, September 16, 2016, Victor Costan <pwnall@chromium.org> wrote:

> Separately from Chrome's policy: your ISP might be trying to sell you
> things you don't need.
> You can get SSL certificates for free from Let's Encrypt and StartSSL. You
> don't need a dedicated IP for SSL, thanks to SNI (Server Name Indication).
> I hope this helps you migrate to SSL. If you care about your vistor count,
> you probably care about your site being shown to your visitors exactly as
> you intended it to be. Without SSL, you're vulnerable to things like ad
> injection, which could degrade your visitors' experience and negatively
> impact your retention rate.
> Hope this helps,
>     Victor
> On Thu, Sep 15, 2016 at 3:27 PM, Christian Trujillo <
> blessingwave@hotmail.com
> <javascript:_e(%7B%7D,'cvml','blessingwave@hotmail.com');>> wrote:
>> I am a web developer and I was talking with a hosting provider we use for
>> marketing sites and blogs, as we were discussing opening a new account we
>> were told that google was looking at enforcing SSL or a dedicated IP
>> address on each site otherwise you would be penalized.

Joseph Lorenzo Hall
Chief Technologist, Center for Democracy & Technology [https://www.cdt.org]
1401 K ST NW STE 200, Washington DC 20005-3497
e: joe@cdt.org, p: 202.407.8825, pgp: https://josephhall.org/gpg-key
Fingerprint: 3CA2 8D7B 9F6D DBD3 4B10  1607 5F86 6987 40A9 A871

Tech Prom, CDT's Annual Dinner, is April 20, 2017!
Received on Monday, 19 September 2016 13:18:41 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:57 UTC