2014/SF/https

From IndieWeb

HTTPS was a session at IndieWebCamp SF 2014.

Notes archived from: https://etherpad.mozilla.org/indiewebcamp-https


When: 2014-03-07 14:45

HTTPS session

Participants

Notes

48500fa0a65911e38b940efe71de0e9b_8.jpg

Let's not turn this into a discussion about the architecture of SSL signing being broken...

Issues with SNI

  • Some client libraries in some programming languages don't have support yet

SPDY - huge performance improvements

HTTP 2.0 won't put SSL requirements in the spec, but Mozilla and Google will both require SSL for SPDY. (http://www.mnot.net/blog/2014/01/04/strengthening_http_a_personal_view)

Tantek asks: is there a recommendation for something I can do to make https not suck when they visit my site?

Will: I'm ok saying Windows XP computers can't access my site. For an eCommerce site I would not say that.

SSL in indiemark?

Why?