H t tepees dos and don'ts as you may have noticed in recent years there has been a massive marketing
campaign concerning the fact that H TTP S is now an Ezio factor and everyone must follow it.
In short when I hear these dogmas I usually want to see it clearly.
I anticipate right away that I haven't switched any of my websites to H TTP S and I only use it for
new projects.
Let me explain what Google recommends is the most common sense.
If I have an e-commerce site which in addition to personal data also collects credit card data it would
be a good idea to use a communication encryption system.
In addition to being PCI compliant in order to avoid for example the classic man in the middle attacks
if I have a blog in which there are no registration forms why should I force the encryption of the connection
to pass public data.
Remember that encryption requires some milliseconds and it is certainly slower than a clear data transfer.
Thus worsening the user experience even if imperceptibly precisely for this reason I believe that there
has been a lot of speculation on the matter and apart from e-commerce Web sites or other Web sites that
require to film forms.
I don't see any good reason to forcing the use of H TTP s especially for FCO purposes.
Another misunderstanding which I often read about is the confusion over the terms.
Often we talk about SS L but the TTP as connection uses a t tell s transport layer security since 2008
and not the old SSL Secure Sockets Layer which had been used back in 1995.
H TTP is a protocol that deals with navigation mechanisms while TR less is an encryption protocol which
verifies the identity of the server by using a certificate depending on your budget.
You can buy a classic DV domain validation certificate for a couple of dollars per year or you could
choose an extended validation evey certificate which after some paperwork will allow your site to have
the famous green bar in the address bar of the browser in the latter case the annual cost reaches about
one hundred dollars but for a company it could procure some advantages in terms of trust and security
perceived by the user.