Hacker News Reader

> So Internet security has become a big and ongoing business, which has to be paid for. If I want to have a secure E-commerce site so I can make money, I have buy security services on top of the basic web services: an HTTPS address instead of the original HTTP: — OK, fair enough.

Has this guy not heard of Let's Encrypt? HTTPS certificates are literally free. I was astounded when I got to the end of the article and saw it was published in 2020 and not 2015.

View on HN

It's even more interesting that they seem to be working with a file-transfer protocol. It seems to me like they should be experts in this field, and clearly not aware of Let's Encrypt.

Im confused.

He is probably assuming that e-commerce sites must/should use EV certificates. It could be an additional trust source but how many users really care that the cert is EVed.

But hes not arguing against EVs (that argument would be very valid).

Reply on news.ycombinator.com