37 signals loathing mixed content - A possible solution?
jamess: Ever hear the term "computationally expensive"? Here's a hint, modular exponentiation of very big numbers is an extremely expensive operation. Encrypting a block of plaintext with a bulk cipher is a very cheap operation. Thanks to the marvels of HTTP keep-alive and TLS session resumption, serving the content over HTTPS is almost guaranteed cheaper than employing this crude hack. This is not even to touch upon the problems not addressed like the HTTP response is designed to be mutable, or that this "solution" offers no replay protection. Also, two words; Hash MAC.Want a real solution to the problem, here: http://www.sun.com/products/networking/sslaccel/suncryptoacc...