Mobile app version of vmapp.org
Login or Join
Deb1703797

: Google wants sites to use SSL, but complains when compression is turned off to prevent BREACH hacks Google has let it be known that they want websites to move to SSL, and they will start

@Deb1703797

Posted in: #Https #Security #Seo

Google has let it be known that they want websites to move to SSL, and they will start making it more and more clear that HTTP sites are 'insecure'. But then using their PageSpeed tool, they will mark you down if your site does not have compression enabled.

The problem is that it does not seem to be possible to enable SSL and compression at the same time thanks to the BREACH vulnerability.

In terms of Google and SEO, is it more important to have SSL, or compression? Or should I not worry about BREACH and go ahead and enable SSL And compression?

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Deb1703797

1 Comments

Sorted by latest first Latest Oldest Best

 

@Smith883

Google is pushing SSL for a reason that web experience should be safe.

A vast number of websites already moved to HTTPS.

With regards breach vulnerability or general issue of any kind, i am sure Google is well aware and they update using webmasters blog.

With regards to compression, if your website process highly sensitive data then you may take required action, more info here:
security.stackexchange.com/questions/20216/should-i-disable-ssl-compression-because-of-crime
If the website is general then it shouldn't matter.

Also, note that Google is pushing with a ranking factor, so it's good to have it.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme