Do you use SSL for XF ?

Long story short is that it's a myth that HTTP makes a site slower or consumes any noticeable amount of server resources. It seems like the people saying that are just saying it because it's something they heard from someone else who also heard it from someone else. In fact, the reality is that HTTPS when configured properly will make the site faster.

There are certainly (arguable) reasons why a site wouldn't want to use HTTPS, but I'm just saying that it making the site slower is most certainly not one of them.
 
I'm re-enabling it now so a comparison won't work, but here is the screenshot WITH https set up. :p
It's still faster!
screenshot.webp
 
Average over 100 runs:

90% faster →

259 ms / 136 ms

Xenforo.com/community
Right side was http
But is SPDY enabled on xenforo.com.
It would be assumed that someone taking the time to set up SSL would also take the time to optimize for speed.
SPDY 3.0 is enabled on OLS on my sites - and it appears that xenforo.com is using Apache:
http://toolbar.netcraft.com/site_report?url=http://xenforo.com
compared to
http://toolbar.netcraft.com/site_report?url=https://servinglinux.com
 
Last edited:
Good to know that OpenLitespeed is supporting SPDY 3.1. LS 5.0 would support this as well, but this would happen probably Q4 this year or next year.
 
What kind of SSL certificate do you use?
A free SSL certificate or Domain Validation , Organization Validation or Extended Validation and what was the price?
 
I don't know about anybody else, but since I don't do any transactions on my site I just went with a DV certificate (2 PostitiveSSL and 2 RapidSSL - to get a feel for the differences between them).
 
Just tested mine using nginx, spdy, latest php, xf, etc and the https is 91% faster over 100 test.
104ms vs 199ms
 
What kind of SSL certificate do you use?
A free SSL certificate or Domain Validation , Organization Validation or Extended Validation and what was the price?
I use Comodo Positive SSL. They have just changed their CA bundle, so my older certs are slightly different. I've put a new one on mattwservices
upload_2014-4-23_17-53-31.webp

old style
upload_2014-4-23_17-56-21.webp
I'll get a new one for Z22SE on payday (Friday)

I also get OSCP stapling working with the new style
upload_2014-4-23_17-54-17.webp

vs

upload_2014-4-23_17-56-0.webp
 
  • Like
Reactions: rdn
It costs less than a domain to put SSL on your site.

Where are you getting your SSL? :cautious: Add in CDN with the ssl and things become interesting. :p

It would technically be 'free' to self sign, but then you end up with a security warning (good for testing though of course).
 
Where are you getting your SSL? :cautious: Add in CDN with the ssl and things become interesting. :p

It would technically be 'free' to self sign, but then you end up with a security warning (good for testing though of course).
NameCheap, PositiveSSL $9 a year, RapidSSL $10.95 (for 1 year, price goes down for the more years you select).
There are probably places cheaper... but I do some domain registrations there so kinda keep it in the family.
 
Top Bottom