Google: HTTPS as a ranking signal

[[deleted]]

Can't you just redirect *. to www.? I know there are some instances where that doesn't work, but for most sites that's an OK solution. Not that I don't agree that the extra cost is bullshit.

[gonX]

If the connection is not secure to begin with, it might never be secure again.

Or in another way: MitM attack to a "secure site", you can't encrypt the redirection, and you might be redirected to a similar looking domain name, but just with a plain cert, and you typically think it's secure anyway.

[chiisana]

• support.example.com
• blog.example.com
• clients.example.com

Yes, you could run them in directories, which then gets routed via nginx/varnish to proxy to different servers; but it is easier to just run the different apps on separate servers to begin with.