Re:Enabling IPv6 support for GitHub Pages
by est31 on Thursday September 30, 2021 @10:27PM
(#28713831)
Introducing HTTPS to existing infrastructures is easy. Just terminate it at some point. It also adds a big advantage to users that their traffic can't be read by network operators. Introducing ipv6 is harder, as you need to change all your routing, logging, banning, etc. facilities to support ipv6. It doesn't add any direct advantages for users, as all ISPs still have to support ipv4.
Re:Enabling IPv6 support for GitHub Pages
by sedatk on Thursday September 30, 2021 @07:42PM
(#28712619)
> Lets Encrypt was released to the public in 2014 and by like... 2019 basically all of the internet was HTTPS
Google's ranking bonus had also been a great incentive.
Re:Enabling IPv6 support for GitHub Pages
by throw0101a on Thursday September 30, 2021 @07:41PM
(#28712616)
> Lets Encrypt was released to the public in 2014 and by like... 2019 basically all of the internet was HTTPS.
This is apples and oranges: absolutely zero software upgrades needed to be done to get HTTPS going and/or Let's Encrypt running.
I was able to get LE going on our F5 appliances in a few working days with zero changes to the base system/appliance software by simply installing the dehydrated ACME client and all of a sudden dozens of sites where we previously didn't want to pay for a cert were "secure".
Network hardware can stay in place for quite a while. Our previous generation of core switches lasted us 7 years before we swapped them out.
I wouldn't be surprised some of the mega-chassis routers in ISPs and other telcos sit around as long.
Re:Enabling IPv6 support for GitHub Pages
by kazen44 on Friday October 01, 2021 @01:38AM
(#28714989)
7 years for a core router is on the low end aswell. High end routers consist of a chassis which can last a decade or more easily. usually the line cards inside the chassis are replaced to allow higher band with, but the control plane can stay in place for a very long time.
If we compare the http to https migration, Firesheep in 2010 demonstrated that maybe migration was the right thing to do rather than just an optional security feature for banks, Lets Encrypt was released to the public in 2014 and by like... 2019 basically all of the internet was HTTPS. There is a long tail to go for the last few sites, and some that have objections to the CA system and are holding out, but really https is just expected these days, which is a much better place than IPv6.