Geekzone server update

Forums › Geekzone › Geekzone server update

1 | 2 | 3 | 4 | 5 | 6 | 7

470 posts

Ultimate Geek

# 1273249 30-Mar-2015 10:44

Technically the tags support https (just tried on our account), but seems like it limits the advertisers. I.e. I'm getting Emirates ads on http, but crappy work from home ads on https. I can't believe ad servers don't support https in 2015.

Would it be possible to make https a subscriber feature?

freitasm

BDFL - Memuneh
64231 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

# 1273251 30-Mar-2015 10:46

Good suggestion. Yes it could work.

My technology disclosure | Digital Transformation | Enterprise Content Management | Customer Relationship Management | Data Insights, Business Intelligence and Advanced Analytics

timmmay

14987 posts

Uber Geek

Trusted

Subscriber

# 1273734 30-Mar-2015 20:22

2 people support this post

Geez the website is flying along tonight, super fast.

gzt

10862 posts

Uber Geek

# 1273827 30-Mar-2015 22:22

My phone is way faster since the server upgrade. But that may be because I had nothing else to do that day and closed all those tabs ; ).

Noodles

470 posts

Ultimate Geek

# 1275833 2-Apr-2015 07:41

One person supports this post

Would it be possible to add opportunistic encryption to geekzone? This was launched in Firefox 37 yesterday and it allows for a browser to use encryption where it would normally use cleartext http. It does this without changing the page to https and doesn't break ads/other resources that aren't secure.

If you add the header Alt-Svc: spdy/3.1=:443 then it will tell Firefox that it can use SPDY on port 443 (which CloudFlare support). Browsers will then send the request header Alt-Used: 1. This also has the benefit of using SPDY's multiplexing etc (and eventually http/2 when CloudFlare support it using Alt-Svc: h2=:443)

I have this deployed on http://www.drugs.com if you want to see it in action

hio77

'That VDSL Cat'
10617 posts

Uber Geek

Trusted

Spark

Subscriber

# 1276077 2-Apr-2015 13:24

Noodles: Would it be possible to add opportunistic encryption to geekzone? This was launched in Firefox 37 yesterday and it allows for a browser to use encryption where it would normally use cleartext http. It does this without changing the page to https and doesn't break ads/other resources that aren't secure.

If you add the header Alt-Svc: spdy/3.1=:443 then it will tell Firefox that it can use SPDY on port 443 (which CloudFlare support). Browsers will then send the request header Alt-Used: 1. This also has the benefit of using SPDY's multiplexing etc (and eventually http/2 when CloudFlare support it using Alt-Svc: h2=:443)

I have this deployed on http://www.drugs.com if you want to see it in action

ild say not really a good example, since many browsers wont load content over http if over https, and lot of the content on your site expects http - thus things like css wont load.

would be nice to see spdy/https added for subscribers though.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Noodles

470 posts

Ultimate Geek

# 1276154 2-Apr-2015 14:56

hio77:
Noodles: Would it be possible to add opportunistic encryption to geekzone? This was launched in Firefox 37 yesterday and it allows for a browser to use encryption where it would normally use cleartext http. It does this without changing the page to https and doesn't break ads/other resources that aren't secure.

If you add the header Alt-Svc: spdy/3.1=:443 then it will tell Firefox that it can use SPDY on port 443 (which CloudFlare support). Browsers will then send the request header Alt-Used: 1. This also has the benefit of using SPDY's multiplexing etc (and eventually http/2 when CloudFlare support it using Alt-Svc: h2=:443)

I have this deployed on http://www.drugs.com if you want to see it in action

ild say not really a good example, since many browsers wont load content over http if over https, and lot of the content on your site expects http - thus things like css wont load.

would be nice to see spdy/https added for subscribers though.

That's the thing the URL never gets set to https, so the browser doesn't block mixed mode content. Sure it's not as secure as full https, but it's better than plain http. Our site switches to relative css/js/images when using https/spdy/h2 and/or opportunistic encryption so everything (apart from 3rd party resources) should be served over a single SPDY connection.