Re: Possibly moving Debian services to a CDN
]] Craig Small
> On Thu, Jan 30, 2014 at 01:53:55PM +0100, Tollef Fog Heen wrote:
> > I thought it's time for a small update about this. As of about an hour
> > ago, planet and metadata.ftp-master are now served from the Fastly CDN,
> > and it all seems to be working quite smoothly.
> https://planet.debian.org/ gives a big scary certificate warning.
Well, yes. We didn't have HTTPS before and we don't have it now
either. One reason to not have it is that you'd have a ton of «insecure
third party resource» warnings. Ganneff said he'd take a look at having
Planet download those resources locally when he has some free time.
Until then, planet is HTTP-only as before. (We want to do this anyway
to avoid leaking information about people who read planet to those
running the hosting for various blogs.)
> Interesting way they've stapled all the names together on the
> certificate too.
> I didn't know you could do that, but, you might like to tell them to
> fix that certificate.
There's not really anything to be fixed, since you shouldn't be using
HTTPS for that host yet.
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are