Questioning Google's motives re the push to HTTPS
scripting.com
scripting.com
So why not just encrypt all access to google.com? I asked.
Because bits of Google code are embedded in other people's pages. Google Analytics, YouTube, maps. I immediately understood. The way HTTPS works, if any component of a page is not secure then all other accesses are not. "
A little help here, what stops me from writing a bot that can do https and get the info from the page?
Yes, some historic components of the web may struggle to move to HTTPS, but there's no problem in that, however we should be looking forward.