[GNC] Site certificate expiry warning

Tom Weichmann tommycw10 at gmail.com
Thu Mar 30 14:36:32 EDT 2023


I'm confused, is someone arguing against using HTTPS on gnucash.org?  Is
there some cost that is trying to be avoided or something like that?  I use
HTTPS on my little personal website because why have any data on the
internet that isn't encrypted.  I can't think of a downside....

On Thu, Mar 30, 2023 at 2:29 PM Dr. David Kirkby <
drkirkby at kirkbymicrowave.co.uk> wrote:

> On Thu, 30 Mar 2023 at 19:03, Michael or Penny Novack <
> stepbystepfarm at comcast.net> wrote:
>
> >
> > > "Here are the criteria for a URL to rate as good in page experience
> > status
> > > in Google Search::
> > >
> > > - *Failed:* The URL is served using HTTP, not HTTPS.
> > >
> > > So it seems to me that the argument that a website does not collect
> > > personal information, so does not need HTTPS, is flawed. You can argue
> > the
> > > technical merits of Google's approach, but it does seem to be the case
> > that
> > > the use of HTTPS is a good thing if you want the website to do well in
> > > Google.
> >
> > Except you seriously misunderstand the difference between HTTP and HTTPS.
> >
>
> I do know the difference.
>
>
> > This has nothing to do with the capability of collecting personal
> > information. It has to do with the SECURITY of what is transmitted. In
> > other words, IF personal data were collected by a site using HTTP it
> > would be insecure during transmission. Therefore a site should not be
> > collecting personal data without being HTTPS.
> >
> > Google is down rating sites using HTTP because it doesn't know what the
> > site is doing (collecting personal data or not). It is telling users
> > "this site less safe" because IF the site is collecting personal
> > information would be less secure.
> >
>
> But that still means if you want to do well in Google, you maximise your
> chances if you use HTTPS. Even if you have a completely static website,
> with no possibility of a user entering even an email address or name.
>
>
> >
> > Michael D Novack
> >
>
> Dave
> _______________________________________________
> gnucash-user mailing list
> gnucash-user at gnucash.org
> To update your subscription preferences or to unsubscribe:
> https://lists.gnucash.org/mailman/listinfo/gnucash-user
> -----
> Please remember to CC this list on all your replies.
> You can do this by using Reply-To-List or Reply-All.
>


More information about the gnucash-user mailing list