为什么不在面向公众的网站上使用 https？
为什么不在面向公众的网站上使用 https？
出于搜索引擎优化的目的？出于性能原因？为什么没有更多的公司在其面向公众的网站上使用 https？
甚至 mint.com 的创始人也提到在其面向公众的网站上不使用 https” http://cnettv.cnet.com/ rr03-mint-ceo-aaron-patzer/9742-1_53-50076867.html 采访进行到 19 分钟时，Mint 创始人提到“这是为了 SEO 目的”
Why would you not use https on your public facing website?
For SEO purposes? For performance reasons? Why don't more companies use https on their public facing site.
Even the founder of mint.com mentions not using https on his public facing site"
http://cnettv.cnet.com/rr03-mint-ceo-aaron-patzer/9742-1_53-50076867.html
19min into the interview the founder of mint mentions "it is for SEO purposes"
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（7）
并非所有浏览器都支持 HTTPS。想想手机和其他轻型设备。
Not all browsers support HTTPS. Think cell phones and other lightweight devices.
访问 SSL 后面的网站时会产生性能影响...通常不会很多，但有时（在某些条件的汇合下）实际上可能会明显变慢。
There is a performance hit incurred when visiting sites behind SSL... it's usually not a lot, but sometimes (under some confluence(s) of conditions) it can actually be noticeably slower.
首次与网站协商连接时，性能会受到影响。这与 SSL 的握手、来回发送信息有关。当您建立 SSL 连接时，尝试嗅探您的浏览器（HTTP 实时标头），以了解幕后发生了多少事情。
创建 SSL 连接时还会对服务器进行计算（它是 CPU 密集型的，就像所有与加密密钥相关的操作一样）。
There is a performance hit when first negotiating a connection with the website. This has to do with the handshake that SSL does, sending information back and forth. Try sniffing your browser (HTTP Live Headers) when you're making an SSL connection to see how much goes on behind the scenes.
There is also a computation hit on the server to create the SSL connection (it's CPU intensive, much like all crypto key-related operations).
让我反过来问您为什么不在您面向公众的网站上使用http？如果所有信息都是公开的，并且没有理由让任何人不希望公众知道他们正在访问您的网站，那么就没有理由去麻烦 https。
Let me turn it around and ask you why you would not use http on your public facing website? If all the information is publicly available and there is no reason anyone would want to have it not publicly knowable that they are hitting your site, then there's no reason to go to the trouble of https.
我想一个例子是您不需要它（例如不需要身份验证）并且您不想花钱购买 SSL 证书？
I suppose one example would be that you don't need it (no authentication, for example) and you don't want to shell out the cash for an SSL Certificate?
性能是不强制使用 HTTPS 的唯一原因（除了根本不需要它之外）。您不应该根据“SEO”做出安全决策。
Performance is the only reason to not force HTTPS (aside from simply not needing it). You shouldn't ever make security decisions based on "SEO".
对于登录页面，希望有更多。请参阅从根本上被破坏的浏览器模型。
For login pages, hopefully more will. See The Fundamentally Broken Browser Model.