Hacker News new | ask | show | jobs
by washingtondc 5722 days ago
Perhaps supporting ssl and/or tls across their infrastructure isn't a priority. Why is that a "fail", as you so succinctly put it?

In addition, I'd like to ask the entire world to stop using 'fail' as a noun. It's lazy and incorrect.
1 comments
mattmanser 5722 days ago
I guess you missed the big story today about Firesheep:

http://news.ycombinator.com/item?id=1827928

link
washingtondc 5722 days ago
That doesn't invalidate my point. Supporting SSL is certainly more costly when you're serving content on the scale of FB.

The costs must be weighed against the benefits. Calling FB out as a "fail" is failing to understand all of the issues.

link
mike-cardwell 5722 days ago
People need to stop repeating this same old false argument. Read http://techie-buzz.com/tech-news/google-switch-ssl-cost.html

"all of our users use HTTPS to secure their email between their browsers and Google, all the time. In order to do this we had to deploy no additional machines and no special hardware. On our production frontend machines, SSL/TLS accounts for less than 1% of the CPU load, less than 10KB of memory per connection and less than 2% of network overhead. Many people believe that SSL takes a lot of CPU time and we hope the above numbers (public for the first time) will help to dispel that."

link