Hacker News Reader

Getting more sites to use Let's Encrypt, or Cloudflare, or to buy a certificate is the intended benefit of the change. Google is gradually restricting these APIs to encrypted origins in order to encourage sites to use encryption, not because they don't want the APIs used.

View on HN

> or Cloudflare

https://www.cloudflare.com/ssl/#cloudflare-ssl-options

cloudflare's "flexible ssl" option encrypts the connection between their datacenter and the user, but not the one between the datacenter and the actual web server

i guess it's better than nothing if your host doesn't support ssl but the false sense of security could be harmful

> to encourage sites to use encryption

And because having your fine location cross the wire unencrypted is a terrible idea :)

Reply on news.ycombinator.com