Using HTTPS on lowendtalk.com

Rob92

If SSL is going to be setup I would say go for it.

sleddog

Mun said: I don't think we should. It makes more sense to give more info to our friends at the NSA. I mean really, we trust them right?

Have you got a contact address? I'll send 'em my info in the hope of saving you American taxpayers a few dollars (already sent it to CSIS).

k0nsl

Ya, please do SSL on LET.a

PremiumN

Definitely. Why not?

Microlinux

@sleddog said:
SSL make for a slower browsing experience. Please don't make it mandatory.

Time to upgrade that old 386!

Profforg

perennate said: Google and Youtube are that slow?

Google and Youtube is slow for me and most of people i know. That's strange, but this is a situation for years

Mark_R

Youtube is slow lately, buffer and page loads. Google is fast as always. but this depends on which country you connect from.

sleddog

Microlinux said: Time to upgrade that old 386!

There's nothing wrong with my computer. It's just as good now as when I bought it 15 years ago!

Boxode

I'd like to see SSL to be honest. Its' become a standard on most sites.

netomx

I would like SSL. I don't feel slow YouTube or Google

Microlinux

@sleddog said:
There's nothing wrong with my computer. It's just as good now as when I bought it 15 years ago!

Touche.

VPN

@wych said:

@ricardo said:

@mpkossen said:

Thanks guys for clarifying.

wojons

I cant see how https/ssl would have a negitive effect (excluding resources to process) on the community

Shoaib_A

LET & LEB both should have an SSL.

neroux

Wow, that spawned quite a discussion :-)

To those who are worried about performance implications with SSL I'd recommend the two links at https://www.facebook.com/sitemeer/posts/607639059297977, especially the second.

As for forced/optional SSL, it would be definitely possible on a per-user basis (see Facebook please) but I wouldnt recommend it anyway.

neroux

mpkossen said: BuySellAds, the joint that makes this place earn $$$.

Mixed Content issue I'd assume. But doesnt BuySellAds offer HTTPS as well?

sleddog

neroux said: To those who are worried about performance implications with SSL I'd recommend the two links at https://www.facebook.com/sitemeer/posts/607639059297977, especially the second.

From that second link:

Google is using several mechanisms to reduce this latency. See this excerpt from the post at Langley’s blog.

OpenSSL tends to allocate about 50KB of memory for each connection. We have patched OpenSSL to reduce this to about 5KB.

Moreover Google also caches most HTTPS requests which allows it to serve them faster in subsequent queries. Google claims that this resume behavior takes place 50% of the time. SSL has been optimized at its best at Google.

These facts prove that SSL is not as resource intensive as it is blamed to be.

Actually I think it proves that SSL does contribute significantly to latency. Why else would Google bother patching OpenSSL and optimizing SSL for their use?

It's kinda irrelevant anyway. lowendtalk.com isn't Google.

bdtech

Number of connections will be low as LET has the Cloudflare free plan proxying at the edges - limiting the number of connections and reusing many. Plus the potential benefits of SPDY

http://blog.cloudflare.com/introducing-spdy

http://blog.cloudflare.com/ocsp-stapling-how-cloudflare-just-made-ssl-30

http://blog.cloudflare.com/what-we-just-did-to-make-ssl-even-faster

http://blog.cloudflare.com/cloudflare-works-with-globalsign-to-make-ssl

If performance is really a concern they could offload SSL to the CF edge as a last resort and utilize flexible SSL (less secure but zero config changes required on the backend); or just man up to enable end to end SSL.

https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-three-SSL-options-off-Flexible-Full-mean-

neroux

sleddog said: Actually I think it proves that SSL does contribute significantly to latency. Why else would Google bother patching OpenSSL and optimizing SSL for their use?

Of course encryption adds an additional layer of computations, which requires a certain amount of additional work. The point was that it wont contribute as much as the common myth often states

we had to deploy no additional machines and no special hardware. On our production frontend machines, SSL/TLS accounts for less than 1% of the CPU load, less than 10KB of memory per connection and less than 2% of network overhead. Many people believe that SSL takes a lot of CPU time and we hope the above numbers (public for the first time) will help to dispel that.

Also, as you pointed out, lowendtalk will hardly need to account for the same amount of concurrent connections and redundancy as Google.

sleddog

neroux said: The point was that it wont contribute as much as the common myth often states

My original comment was based on my own user experience, not myths. Just sayin'.

joepie91

HSTS.

mpkossen

Considering the discussion this has sparked, I'm definitely going to explore the options.

Thanks guys, for all the input :-)

wojons

@neroux said:
Wow, that spawned quite a discussion :-)

To those who are worried about performance implications with SSL I'd recommend the two links at https://www.facebook.com/sitemeer/posts/607639059297977, especially the second.

As for forced/optional SSL, it would be definitely possible on a per-user basis (see Facebook please) but I wouldnt recommend it anyway.

I am fine with ssl perfomance it really effects older computers more and some mobile devices but thats going away also.

bdtech said: Number of connections will be low as LET has the Cloudflare free plan proxying at the edges - limiting the number of connections and reusing many. Plus the potential benefits of SPDY

I would think from the ads 20$ a month to move to pro would be well worth it and it would then only be 5$ a month to add lowendtalk so 25$ for both sites to have ssl on cloudflare.

cheapdave

if this vote is still open, then mine is for SSL. Everything should be SSL in the light of what we know about the internet in recent months.

Floris

@mpkossen said:
Considering the discussion this has sparked, I'm definitely going to explore the options.

Thanks guys, for all the input :-)

from what I read on google, BSA Pro supports SSL now.

howardsl2

CloudFlare claims that SSL can be made 30% faster with OCSP stapling. (Source)

marcm

hwdsl2 said: CloudFlare claims that SSL can be made 30% faster with OCSP stapling. (Source)

They can claim that all day long, it doesn't necessarily make it true.

lewekleonek

Seems like BSA is https capable, at least in case of the image delivery: https://s3.buysellads.com/1278603/190497-1380571705.gif

neroux

@mpkossen said:
Considering the discussion this has sparked, I'm definitely going to explore the options.

Thanks guys, for all the input :-)

thats great to hear

neroux

@mpkossen Any update on this issue? Thanks.