My Life Blog

BILLEISENHAUER.COM

Why no SSL?

Filed under: Web/Tech — Bill Eisenhauer at 5:35 pm on Saturday, June 3, 2006

For the non-techies, SSL stands for Secure Sockets Layer and is used by websites to encrypt data when needed.

I could probably have titled the post a bit better, but couldn’t figure out how to make it concise.  My real question is: why are new web sites no longer bothering to encrypt your sensitive data?  I’ve noticed many new sites that don’t bother to encrypt your sign-up and sign-in data.  The problem with this is that anyone snooping Internet data can intercept that data.

Many of these sites don’t have sensitive data other than the sign-up information, but sometimes people use the same log-in credentials over and over.  I will not say if I am guilty of this. :)   But for those who are, if your credentials are intercepted on one of these sites, then they can be tried on other popular sites like email sites.

I think this is a by-product of how easy it is starting to be to build and host a web site.  So my point to this post is that you should be mindful of who you give your credentials to.  If you are lazy, have one set of credentials for the secure sites and have another set of credentials for untrusted sites.  That way you can survive an interception.

For web site developers, consider coughing up the money for an SSL certificate and make the necessary programming changes if you wish to be considered in the trusted category.

No Comments »

No comments yet.

RSS feed for comments on this post.

Leave a comment

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>