NUS IT Admins Need to Understand the Proper Usage of "S" in HTTPS

The S in HTTPS stands for Secure [sockets] - an encrypted connection to the server, which means exchanging much more data than a normal HTTP connection.

When used in ideal situations, the admin (or anyone else monitoring the packets from your PC) can not see what data you are sending, including form data as it is all encrypted. Even if the admin is a super administrator of the NUS network.

So, having said that, WHY do these pages require (read:won't work with normal http) HTTPS connections?

IVLE - Integrated Virtual Learning Environment https://ivle.nus.edu.sg/default.asp
Mail https://exchange.nus.edu.sg/exchweb/bin/auth/owalogon.asp?url=https://exchange.nus.edu.sg/exchange&reason=0
Modules Listing https://aces01.nus.edu.sg/cors/jsp/report/ModuleInfoListing.jsp
mySOC https://mysoc.nus.edu.sg/mysoc/index.cgi
Need to know module information? Its in a HTTPS website for no particular reason! CS1110X - https://aces01.nus.edu.sg/cors/jsp/report/ModuleDetailedInfo.jsp?acad_y=2006/2007&sem_c=1&mod_c=CS1101X
Timetable Builder https://webrb.nus.edu.sg/ctt/builder.aspx

You may argue, the authentication details need to be encrypted. The username password should be in a secure channel.

Yes, I agree - but why encrypt the whole system? Why not just create a *standard* login page for the entire system in HTTPS mode and perform normal authenticated actions in HTTP mode?

See Hotmail for a perfect example. Click "Sign in using enhanced security", brings you to an HTTPS page. Sign in. Notice that you're brought back to a HTTP page after successful login.

The reason why HTTPS should not be overused is because of its higher bandwidth requirement. NUS is already slow as it is (yes, for a local site, it is very slow - try downloading Ubuntu and max speed is 10-40KB/s - US sites can go much faster than this).

That brings me to another issue - NUS needs to consider a bigger pipe to the major ISPs here. Loading the homepage itself takes about 15-20 seconds with my Singnet broadband.

Otherwise, preparing myself for the 8am class on Monday next week, that means I have to leave at 6-630hrs in the morning. Took a glimpse of the MA1301 exam paper, OMG it is so complicated! Take for example, this question.