Re: Draft finding - "Transitioning the Web to HTTPS"

Mark Nottingham wrote:
> 
> * The example of a village with poor access (e.g., in Africa) has
> regularly been brought up in the IETF as an example of a population
> who want shared caching, rather than encryption. The (very strong)
> response from folks who have actually worked with and surveyed such
> people has just as regularly been that many of these people value
> security and privacy more. 
> 

Until those people realize that what really matters to their business,
is reliability -- is three days of downtime with no support from the
"security/privacy" providers who are capable of providing scaling in an
"HTTPS Everywhere" Web, really an improvement? Or just a false economy
based on a false sense of security/privacy?

I'd like to see a survey which takes reliability into account, where
"security/privacy" leads to downtime in their online presence -- the
impact of which is definitely more noticeable in their bottom lines
than they ever noticed from not using encryption on every request/
response.

-Eric

Received on Tuesday, 9 December 2014 05:45:30 UTC