Expedited SSL is a company selling SSL certificates for Heroku, and its blog explains cloud services and offers free SSL tools.
HN commenters link its SSL scanner for certificate expiry and SHA-1 checks, and its founder shares startup marketing lessons. One reports a possible scanner error.
Using www puts the customer first.
Being able to serve your website from a CDN helps the customer: it means the website is up when they want to visit it, and it usually means it's faster for them.
Having static content not get cookies helps the customer: it keeps HTTP traffic down, which means that pages load faster.
Separating cookies between different websites helps the customer: it means that when, inevitably, blog.example.com gets broken into, the customer's account info at www.example.com is not compromised. (Of course, this assumes that you're doing least-privilege between your various websites, but you're already doing that because you care about your customer and don't want to send them a letter about how you lost their personal information.)
Not using a separate top-level domain for static content helps the customer: they know that www.example.com and static.example.com are from the same company they trust, Example Industries, Inc. If you caused their browser to show that it's loading files from "static.excdn.com" or something, they might worry.
The customer isn't personally following the redirect; their browser does, so I'm not sure I understand how the redirect deprioritizes the user. As far as visual clutter goes, get an EV cert, which either supplants or replaces the address bar with something much more useful than a URL:
https://www.expeditedssl.com/assets/browser-ssl/extended-validation-mobile-safari-ssl-20661a5fae2dfff775c45676c41e75d1.png
I run an incredibly boring business (SSL certs for Heroku), for which:
1. The majority of my alpha and beta testers came from Twitter.
2. The second highest source of traffic to both my marketing site [1] and the actual add-ons page [2] is from Twitter.
3. All of the testimonials on my site (which have been incredibly helpful in convincing people my service is useful are actually Twitter embeds)
4. There was a Heroku presentation given in Tokyo where my add-on was brought up as an example, which someone in the audience then tweeted about in Japanese. This triggered an alert on my computer (from Tweetdeck) and I was then able to on the fly answer questions people there had about it.
To me, with the people I follow, Twitter seems more like a programmers / startups meetup or conference than anything else.
1 - https://www.expeditedssl.com
2 - https://addons.heroku.com/expeditedssl
Well, it's a subjective statement as it is my opinion. But for me as a Swede:
* The closest retail in Amazon is in GB or Germany, orders takes weeks to reach me which is a mystery since I've ordered stuff from Germany before and they usual deliver within a week.
* Closest AWS datacenter is in Ireland, latency is high for nordic countries.
* Their documentation is very confusing, you can read all about their web services without understanding one. Leading to sites like this: https://www.expeditedssl.com/aws-in-plain-english
But sure, their services works and is probably good for many, but I've never found them any useful at all.
> Microsoft is terrible at picking good proper nouns for products.
I wonder if there's a sort of internal fighting for each team to squat on the "best" names for their product or service. Basically a Dilbertian confusopoly [0] where the goal is to make your project sound like "the obvious choice" regardless of its merits, with "Microsoft" on the front as the only way it stops being impossible to trademark.
I imagine other large companies struggle with this as well, although Amazon seems to have taken to the other extreme [1].
[0] https://en.wikipedia.org/wiki/Confusopoly
[1] https://www.expeditedssl.com/aws-in-plain-english
a) This is great. Also, a friend linked me to Expedited SSL yesterday and I link to it in the bottom of this post.
b) I think its SHA-1 scanner is mistaken - it flags my site as using SHA-1, but it's SHA-2 in every cert in its chain: https://www.expeditedssl.com/simple-ssl-scanner/scan?target_domain=konklone.com
It’s not jus the icons. It’s the names too since a lot of them are completely unrelated to the product itself.
I actually find myself referring to “Amazon Web Services in Plain English” [0] every once in a while.
[0]: https://www.expeditedssl.com/aws-in-plain-english