I assume he
knew what he was talking about (via his Web-site engineering
people). I suppose I could research it, but I don't have the time right
at the moment. I'd love to hear if anyone else knows more.
It is true. Google now marks any site that is not using HTTPS as
"insecure", and uses that as a negative weight in their rankig
algorithm.
I have mixed feelings about this. I do think that FORCING people to use
TLS encryption is a bad thing. On the other hand, we live in strange
times -- many ISPs are intercepting HTTP traffic and injecting content
into the pages. Using TLS encryption is an effective way to avoid this
(for now). I personally enforce TLS on all my sites just for that
reason.
I offer both on Floodgap pages. I don't see why it should be an either-or
proposition.
--
------------------------------------ personal:
-- The future's got all the time in the world! -- Dinosaur Comics #1932 -------