Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    text
    copied!<p><b>"How can I avoid this?"</b></p> <p>You shouldn't!</p> <p>Although you could try that with JavaScript. This might work on some browsers and fail on others.</p> <p><b>"What's the purpose of this dialog?"</b></p> <p>It warns because switching between SSL and non-SSL on websites is usually unexpected by the user. A warning about the "non-SSL to SSL" is not emitted since it increases security and privacy. However, when security is suddenly <i>decreased</i>, the user should notice that quickly, in order to avoid a false feeling of security. In fact, redirecting to a non-SSL site is sometimes used in XSS/MITM attacks.</p> <p><b>"SSL is going to cause an increase in traffic / processing power"</b></p> <p>This is nonsense. It might be true for sites full of big, static content. However, for normal dynamic web applications, encryption is very cheap compared to business logic, database access, etc.</p> <p>There is an urban legend saying that SSL-content is not chached by browsers. See "<a href="https://stackoverflow.com/questions/174348/will-web-browsers-cache-content-over-https">Will web browsers cache content over https</a>" for more information.</p> <p><b>"Yahoo does it. Yahoo is a big technical company. Are you smarter than Yahoo?"</b></p> <p>Some rhetoric counter-questions:</p> <ul> <li>Are you a big technical company like Yahoo?</li> <li>Did being a big technical company prevent Microsoft from producing crappy software?</li> <li>Do you have to support crappy old (SSL-broken) browsers, as Yahoo has to?</li> </ul>
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload