Hacker News new | ask | show | jobs
by Macha 1723 days ago
That's a different concern though - Promoting the whole use case of the internet vs migration from one protocol to another.

If we compare the http to https migration, Firesheep in 2010 demonstrated that maybe migration was the right thing to do rather than just an optional security feature for banks, Lets Encrypt was released to the public in 2014 and by like... 2019 basically all of the internet was HTTPS. There is a long tail to go for the last few sites, and some that have objections to the CA system and are holding out, but really https is just expected these days, which is a much better place than IPv6.

3 comments

Introducing HTTPS to existing infrastructures is easy. Just terminate it at some point. It also adds a big advantage to users that their traffic can't be read by network operators. Introducing ipv6 is harder, as you need to change all your routing, logging, banning, etc. facilities to support ipv6. It doesn't add any direct advantages for users, as all ISPs still have to support ipv4.
> Lets Encrypt was released to the public in 2014 and by like... 2019 basically all of the internet was HTTPS

Google's ranking bonus had also been a great incentive.

> Lets Encrypt was released to the public in 2014 and by like... 2019 basically all of the internet was HTTPS.

This is apples and oranges: absolutely zero software upgrades needed to be done to get HTTPS going and/or Let's Encrypt running.

I was able to get LE going on our F5 appliances in a few working days with zero changes to the base system/appliance software by simply installing the dehydrated ACME client and all of a sudden dozens of sites where we previously didn't want to pay for a cert were "secure".

Network hardware can stay in place for quite a while. Our previous generation of core switches lasted us 7 years before we swapped them out.

I wouldn't be surprised some of the mega-chassis routers in ISPs and other telcos sit around as long.

7 years for a core router is on the low end aswell. High end routers consist of a chassis which can last a decade or more easily. usually the line cards inside the chassis are replaced to allow higher band with, but the control plane can stay in place for a very long time.