CCN Case Study Gaurang
CCN Case Study Gaurang
CCN Case Study Gaurang
2. Should all web traffic be required to use HTTPS? Why, or why not?
HTTPS promotes security, however, not all should be in HTTPS format, and with
HTTPS websites will lose the ability to cache.
Also, a purely security-focused, HTTPS-only Web would, with today's technology,
be slower.
For sites that don't have any reason to encrypt anything the overhead and loss of
caching that comes with HTTPS just don't make sense.
However, for big sites like Facebook, Google Apps, or Twitter, many users might be
willing to take a slight performance hit in exchange for a more secure connection.
More and more websites are adding support for HTTPS showing that users do value
security over speed, so long as the speed difference is minimal.
The main reason most of us are not using HTTPS to serve our websites is simply
that it doesn't work with virtual hosts. Virtual hosts, which are what the most common
cheap Web hosting providers offer, allow the Web host to serve multiple websites
from the same physical server—hundreds of websites all with the same IP address.
That works just fine with regular HTTP connections, but it doesn't work at all with
HTTPS.