7 ms·
In the switch to https everywhere, we have barely started. For every HN and wikipedia with https there are 20 websites without (and whether the ones that do htt
by Zoepfli 13y ago
In the switch to https everywhere, we have barely started. For every HN and wikipedia with https there are 20 websites without (and whether the ones that do https do really secure https is yet another question).
Somebody should go through the top 10k websites and make a list, then repeat every few months.
- consultant23522 13y agoWell, if you go by % of internet traffic Google is 40-50% of all internet traffic. You could probably get above 99% of all internet traffic with a shockingly small number of sites. While Google, for example, uses SSL it's not like your data is really secure from monitoring there.
- glazskunrukitis 13y agoI understand that some time ago there were reasons behind not using https (price, setup, performance), but now you can get a certificate for few bucks[1]. [1] http://getssl/en/ssl-certificates http://getssl/en/ssl-certificates
- ivanr 13y agoFYI, in my research, about 10% of Alexa top 1 million sites support SSL. For the configuration of those 10%, see SSL Pulse https://www.trustworthyinternet.org/ssl-pulse/ https://www.trustworthyinternet.org/ssl-pulse/
- cpeterso 13y agoNote that Wikipedia supports HTTPS, but it is not the default (yet).
- Zoepfli 13y agoFunny, it is for me: any wikipedia page redirects to its https counterpart. E.g. http://en.wikipedia.org/wiki/Hacker_News http://en.wikipedia.org/wiki/Hacker_News redirects to https://en.wikipedia.org/wiki/Hacker_News https://en.wikipedia.org/wiki/Hacker_News .
- StavrosK 13y agoAre you using the HTTPS Everywhere extension, perhaps?
- Zoepfli 13y agoNo I'm not. I'd love to, but there is none for Safari as far as I'm aware of.
- makomk 13y agoDo you have a user account at Wikipedia by any chance? They've been redirecting logged-in users to the SSL version for a while, and under some circumstances it also seems to redirect users who have been logged in but aren't right now.
- Zoepfli 13y agoI do indeed have a WP account. It redirects as well when I'm logged out.
- teeja 13y agoI think that somebody is the EFF. HTTPS-Everywhere (look to the bottom of the page to DL the latest .xmi) has a LOT (certainly hundreds) in their list ... with qualifiers noted. https://www.eff.org/https-everywhere https://www.eff.org/https-everywhere