Re: [TLS] TLS, PKI,

[Martin Rex <[e-mail]>]

Robert Relyea wrote:
> 
> On 07/13/2010 10:08 PM, Peter Gutmann wrote:
> >
> > SSH has captured close to 100% of its target market.
> > When was the last time you used telnet?

100% agreement.

> 
> I agree, so has SSL for it's target market. It's just that SSL's target
> market is larger. The number of people doing e-commerce versus the
> number of linux admins;).

TLS might be considered successful, when port 80 of >90% e-commerce sites
will return a simple Warning Page that one should not use HTTP
or (more conveniently) a redirect to HTTPS.

The current use of HTTPS is marginal at best for e-commerce sites,
and this is particularly embarrassing for high-profile e-commerce
such as financial e-commerce (banks,brokerage).

If I try https://www.ebay.com or https://www.ebay.de it gives
me a "connection refused".  And when I try "https://www.amazon.com"
it redirects me to "http://www.amazon.com".  So much for the success
of TLS in it's target market.
(Curiously, https://www.amazon.de remains on HTTPS -- make me wonder
 wether one of them is non-intentional and which of them).


-Martin