Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Is SSL really worth it?

Tags:

security

ssl

I'm wondering if I should add an SSL layer between my server and client. I'm not handling any confidential data, but there is a very small chance someone might want to hack transmissions in order to gain intelligence (this is a game by the way). Now the amounts of data to be processed are considerable when compared to a small website and although the added security might be nice the most likely hackers would be users themselves, so I feel SSL would be a waste of time, but would like to hear about others experiences.

Thanks

like image 729
Robert Gould Avatar asked Nov 25 '08 15:11

Robert Gould


People also ask

Is SSL enough for your security?

SSL is great, but it is simply not enough. The interception the data packets flowing between visitor and website is only one way internet criminals gain access to sensitive information. If SSL has not been properly implemented, some content on a site may NOT covered by the encryption expected.

Why SSL is not secure anymore?

While the majority of websites have already migrated to HTTPS, HTTPS sites can still be labeled as not secure. There are two main ways that this can happen: Calls to non-secure 3rd party resources like images, Javascript, and CSS. Expired, missing, or invalid SSL certificates.

Is SSL obsolete?

SSL is now considered obsolete and insecure (even its latest version), so modern browsers such as Chrome or Firefox use TLS instead. SSL and TLS are commonly used by web browsers to protect connections between web applications and web servers.

Is SSL 100% secure?

The HTTPS or a SSL certificate alone is not a guarantee that the website is secure and can be trusted. Many people believe that a SSL Certificate means a website is safe to use. Just because a website has a certificate, or starts with HTTPS, does not guarantee that it is 100% secure and free from malicious code.


1 Answers

This sounds like an optimization question. If you have information that you feel is valuable, start with SSL (a relatively easy security solution to try out). Once you have things working, benchmark the system with and without. If you feel that the performance hit is worth spending time on to try and optimize away, do that. If not, you're done!

like image 198
Bob Cross Avatar answered Jan 03 '23 14:01

Bob Cross