Geekzone server update

Forums › Geekzone › Geekzone server update

1 | 2 | 3 | 4 | 5 | 6 | 7

487 posts

Ultimate Geek

#1273249 30-Mar-2015 10:44

Technically the tags support https (just tried on our account), but seems like it limits the advertisers. I.e. I'm getting Emirates ads on http, but crappy work from home ads on https. I can't believe ad servers don't support https in 2015.

Would it be possible to make https a subscriber feature?

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

freitasm

BDFL - Memuneh
79130 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1273251 30-Mar-2015 10:46

Good suggestion. Yes it could work.

timmmay

20476 posts

Uber Geek

Trusted

Lifetime subscriber

#1273734 30-Mar-2015 20:22

Geez the website is flying along tonight, super fast.

gzt

16984 posts

Uber Geek

Lifetime subscriber

#1273827 30-Mar-2015 22:22

My phone is way faster since the server upgrade. But that may be because I had nothing else to do that day and closed all those tabs ; ).

Noodles

487 posts

Ultimate Geek

#1275833 2-Apr-2015 07:41

Would it be possible to add opportunistic encryption to geekzone? This was launched in Firefox 37 yesterday and it allows for a browser to use encryption where it would normally use cleartext http. It does this without changing the page to https and doesn't break ads/other resources that aren't secure.

If you add the header Alt-Svc: spdy/3.1=:443 then it will tell Firefox that it can use SPDY on port 443 (which CloudFlare support). Browsers will then send the request header Alt-Used: 1. This also has the benefit of using SPDY's multiplexing etc (and eventually http/2 when CloudFlare support it using Alt-Svc: h2=:443)

I have this deployed on http://www.drugs.com if you want to see it in action

hio77

'That VDSL Cat'
12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

Subscriber

#1276077 2-Apr-2015 13:24

Noodles: Would it be possible to add opportunistic encryption to geekzone? This was launched in Firefox 37 yesterday and it allows for a browser to use encryption where it would normally use cleartext http. It does this without changing the page to https and doesn't break ads/other resources that aren't secure.

If you add the header Alt-Svc: spdy/3.1=:443 then it will tell Firefox that it can use SPDY on port 443 (which CloudFlare support). Browsers will then send the request header Alt-Used: 1. This also has the benefit of using SPDY's multiplexing etc (and eventually http/2 when CloudFlare support it using Alt-Svc: h2=:443)

I have this deployed on http://www.drugs.com if you want to see it in action

ild say not really a good example, since many browsers wont load content over http if over https, and lot of the content on your site expects http - thus things like css wont load.

would be nice to see spdy/https added for subscribers though.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Noodles

487 posts

Ultimate Geek

#1276154 2-Apr-2015 14:56

hio77:
Noodles: Would it be possible to add opportunistic encryption to geekzone? This was launched in Firefox 37 yesterday and it allows for a browser to use encryption where it would normally use cleartext http. It does this without changing the page to https and doesn't break ads/other resources that aren't secure.

If you add the header Alt-Svc: spdy/3.1=:443 then it will tell Firefox that it can use SPDY on port 443 (which CloudFlare support). Browsers will then send the request header Alt-Used: 1. This also has the benefit of using SPDY's multiplexing etc (and eventually http/2 when CloudFlare support it using Alt-Svc: h2=:443)

I have this deployed on http://www.drugs.com if you want to see it in action

ild say not really a good example, since many browsers wont load content over http if over https, and lot of the content on your site expects http - thus things like css wont load.

would be nice to see spdy/https added for subscribers though.

That's the thing the URL never gets set to https, so the browser doesn't block mixed mode content. Sure it's not as secure as full https, but it's better than plain http. Our site switches to relative css/js/images when using https/spdy/h2 and/or opportunistic encryption so everything (apart from 3rd party resources) should be served over a single SPDY connection.