• Stop being a LURKER - join our dealer community and get involved. Sign up and start a conversation.

Reply to thread

Now that we have Let's Encrypt (https://letsencrypt.org/) you'll see alot more SSL stuff happening much easier I predict.

There's no longer certificate costs, painful installations, etc. There's simple configurations and installations.


There are still some sloppy limitations that require DevOps people to do their job right - by default 1 SSL certificate per IP address is a limitation that causes issues for "out of the box" setups. We've been playing with adding SSL certificates to all sites by default and we ran into some of the issues yago spoke of (insecure iframes, chat codes, etc). Modern browsers will throw warnings if the page is secure but elements on the page (iframes and chat) are not secure for some reason. The warning looks far worse than not having SSL at all.