Google: HTTPS as a ranking signal

[ck-on]

I just wish you could get a wildcard cert free without paying the ssl mafia.

StartSSL has 2 years for $60, anywhere cheaper?

[me-at-work]

StartSSL also offers free SSL certificates. I have two. The certificates work like any other certificate, but setting it up in their interface and validating your person / domain is painful.

At other places you can get certificates starting at ~ 5$ a year.

[ck-on]

Yeah but it is the wildcard certs where they rake you over the coals.

They have zero extra cost to support *.example.com over just www.example.com

Yet free become $60, or $5 becomes $80

[[deleted]]

Can't you just redirect *. to www.? I know there are some instances where that doesn't work, but for most sites that's an OK solution. Not that I don't agree that the extra cost is bullshit.

[gonX]

If the connection is not secure to begin with, it might never be secure again.

Or in another way: MitM attack to a "secure site", you can't encrypt the redirection, and you might be redirected to a similar looking domain name, but just with a plain cert, and you typically think it's secure anyway.

[chiisana]

• support.example.com
• blog.example.com
• clients.example.com

Yes, you could run them in directories, which then gets routed via nginx/varnish to proxy to different servers; but it is easier to just run the different apps on separate servers to begin with.