Skip to main content
added 132 characters in body
Source Link
Lie Ryan
  • 31.6k
  • 6
  • 71
  • 96

Other than the cost, are there any downsides to HTTPS?

Yes, HTTPS traffic cannot be cached by third party proxies. If your content is highly cacheable (very likely if your site is mostly static content) and you have lots of users that have slower internet connection (e.g. most people in developing countries rely solely on slow, congested mobile network), caching proxies set up by their ISPs or mobile providers or corporate/university network cannot return a locally cached result. Instead they all have to go all the way to hit your server even when the same content has been requested thousands of times around the neighborhood.

This can be mitigated a little if these users install their ISPs proxy certificate, which allows the ISP to essentially do an MITM with the user's permission, but this willwill significantly compromise the security of sites that actually needsdo need the security of HTTPS.

Other than the cost, are there any downsides to HTTPS?

Yes, HTTPS traffic cannot be cached by third party proxies. If your content is highly cacheable (very likely if your site is mostly static content) and you have lots of users that have slower internet connection (e.g. most people in developing countries rely solely on slow, congested mobile network), caching proxies set up by their ISPs cannot return a locally cached result. Instead they have to go all the way to hit your server.

This can be mitigated a little if these users install their ISPs certificate, which allows the ISP to essentially do MITM with the user's permission, but this will significantly compromise the security of sites that actually needs HTTPS.

Other than the cost, are there any downsides to HTTPS?

Yes, HTTPS traffic cannot be cached by third party proxies. If your content is highly cacheable (very likely if your site is mostly static content) and you have lots of users that have slower internet connection (e.g. most people in developing countries rely solely on slow, congested mobile network), caching proxies set up by their ISPs or mobile providers or corporate/university network cannot return a locally cached result. Instead they all have to go all the way to hit your server even when the same content has been requested thousands of times around the neighborhood.

This can be mitigated a little if these users install their ISPs proxy certificate, which allows the ISP to essentially do an MITM with the user's permission, but this will significantly compromise the security of sites that actually do need the security of HTTPS.

added 89 characters in body
Source Link
Lie Ryan
  • 31.6k
  • 6
  • 71
  • 96

Other than the cost, are there any downsides to HTTPS?

Yes, HTTPS traffic cannot be cached by third party proxies. If your content is highly cacheable (very likely if your site is mostly static content) and you have lots of users that have slower internet connection (e.g. most people in developing countries rely solely on slow, congested mobile network), caching proxies set up by their ISPs cannot return a locally cached result. Instead they have to go all the way to hit your server.

This can be mitigated a little ofif these users install their ISPs certificate, which allows the ISP to essentially do MITM with the user's permission, but this will significantly compromise the security of sites that actually needs HTTPS.

Other than the cost, are there any downsides to HTTPS?

Yes, HTTPS traffic cannot be cached by third party proxies. If you have lots of users that have slower internet connection (e.g. most people in developing countries rely solely on slow, congested mobile network), caching proxies set up by their ISPs cannot return a locally cached result. Instead they have to go all the way to hit your server.

This can be mitigated a little of these users install their ISPs certificate, which allows the ISP to essentially do MITM with the user's permission, but this will significantly compromise the security of sites that actually needs HTTPS.

Other than the cost, are there any downsides to HTTPS?

Yes, HTTPS traffic cannot be cached by third party proxies. If your content is highly cacheable (very likely if your site is mostly static content) and you have lots of users that have slower internet connection (e.g. most people in developing countries rely solely on slow, congested mobile network), caching proxies set up by their ISPs cannot return a locally cached result. Instead they have to go all the way to hit your server.

This can be mitigated a little if these users install their ISPs certificate, which allows the ISP to essentially do MITM with the user's permission, but this will significantly compromise the security of sites that actually needs HTTPS.

Source Link
Lie Ryan
  • 31.6k
  • 6
  • 71
  • 96

Other than the cost, are there any downsides to HTTPS?

Yes, HTTPS traffic cannot be cached by third party proxies. If you have lots of users that have slower internet connection (e.g. most people in developing countries rely solely on slow, congested mobile network), caching proxies set up by their ISPs cannot return a locally cached result. Instead they have to go all the way to hit your server.

This can be mitigated a little of these users install their ISPs certificate, which allows the ISP to essentially do MITM with the user's permission, but this will significantly compromise the security of sites that actually needs HTTPS.