News for hackers. Stuff that matters.
Re:NeverSSL by Evanbenn on Saturday November 02, 2019 @07:12PM (#21430773)
right! they need to set up a cloudflare proxy, or have github host it for example.
Re:NeverSSL by lima on Saturday November 02, 2019 @07:16PM (#21430798)
Can't do any useful caching for a purposefully cache-busting website
Re:NeverSSL by notatoad on Saturday November 02, 2019 @09:01PM (#21431293)
it's not cache-busting, it's captive-portal busting. there's no reason it couldn't be cached on some service that charges less for bandwidth than AWS does.
Re:NeverSSL by ixxivvix on Sunday November 03, 2019 @12:52AM (#21432267)
Although yours is a valid reason, but I’ve had a colleague of mine who isn’t savvy enough to use this when they need to connect, but they told me they stopped using it because it would show them the page even though they haven’t connected yet because their browser cached the page somehow. I’ve adjusted by using a private/guest browsing mode to open this page but the cache busting cuts it easier for people who have no knowledge of caching.
Re:NeverSSL by lonelappde on Sunday November 03, 2019 @09:37AM (#21434086)
Ctrl-shift-R solves that?
Re:NeverSSL by efreak on Saturday November 09, 2019 @07:11PM (#21495454)
Only if you have a keyboard. If I'm on a captive portal, most likely I'm on my phone.
Re:NeverSSL by homero on Sunday November 03, 2019 @03:26AM (#21432785)
Re:NeverSSL by hn_throwaway_99 on Saturday November 02, 2019 @07:19PM (#21430809)
I'm pretty sure GitHub would require SSL, no?
Re:NeverSSL by morpheuskafka on Saturday November 02, 2019 @10:13PM (#21431588)
Not on a custom domain--it's optional, and you have to have a CAA policy that will allow them to get an SSL cert for your domain and agree to allow them to do so. It's only required for github.io subdomains.
Re:NeverSSL by rumblefrog on Saturday November 02, 2019 @07:35PM (#21430880)
There's an option to enforce it.