Hacker News new | ask | show | jobs
by imajes 3571 days ago
Why are you going to lose Advertiser money? That's bogus.

Why does Google profit from HTTPS over HTTP?

Amazon.com (HTTP) redirects to (HTTPS), via a 301 - that's Permanent Redirection.

This also isn't Mozilla, but Chrome.

And honestly i don't even know where to begin, but you should look into HSTS, and the vulnerabilities that exist transitioning between the two modes[1],

as well as looking at the issues (data bleed, etc) that happen with a http+https web and mixed content.

Finally the bigger issue to ad rev is likely to be cross origin content rather than https.

and, er, semantically there's a gulf of difference between "Not Secure" and "Insecure".

Also, arguably, the shift to a https first web is what's helping us shine light into bad CAs and deeper audits that are finding the esoteric bugs -- so it's only a good thing, in the long term.

[1]: http://michael-coates.blogspot.com/2009/02/compromising-http...

1 comments

> Why does Google profit from HTTPS over HTTP?

Because it removes the ability for ISPs to act as a competitor to Google by injecting ads and profiling customer browsing.

You may not like that ISPs have done that (I don't) but it's competition for Google, and removing it is therefore good for Google's profits.