Security Basics mailing list archives

Re: Web Hosting / and Site Security Question


From: Adam Jones <ajones1 () gmail com>
Date: Fri, 8 Oct 2004 20:50:25 -0500

IMO using SSL for things like link pages should be determined by your
userbase. SSL adds extra connection overhead, which makes the site
crawl that much slower for dialup users. That said if the majority of
your traffic is on a bigger pipe there is not much in the way of
disadvantages.

Although it is nice to see via a technology like SSL that you are
viewing the website you think you are, the majority of users are
either going to 1) not understand the technology well enough to
benefit from it and be able to know the difference, or 2) understand
what phishing scams are, and generally be able to distinguish them.

In the end it (like always) boils down to what your customer wants, or
what their customers want. If technologies like SSL will make someone
more happy with their product/service, work with them to decide if the
extra feature is worth the extra headache. I agree completly that they
need to shop around for a security conscious provider, the additional
risk of not using one is far from worth whatever savings you may get
from it.

-Adam


Current thread: