Sheogorath on Nostr: I'm all in on https-only and lets get rid of port 80 listens. But then I remember my ...
I'm all in on https-only and lets get rid of port 80 listens. But then I remember my Shelly Plugs which can't do https. They just download their firmware over from any HTTP URL you point them at.
(And you can imagine how annoying it was, when I figured that out…)
To provide another war story, we recently switched internal root CAs for an general endpoint. Not every client took that well…
HTTPS does improve security, but is complex enough to add unreliability.
Published at
2024-06-03 19:47:37Event JSON
{
"id": "87d1d8c0de71b2c2c710366bc5a9d500818489a4fe8073f598fd1774a6264f83",
"pubkey": "48ed96a072cb386c2f704daeac1d2a1ed203ee5628ffc4f1832f243739b86d4f",
"created_at": 1717444057,
"kind": 1,
"tags": [
[
"e",
"a3a2f4b556e0406b3a9a0183f32555ee7db0e5fd67ef70d780afac6e6badd577",
"",
"root"
],
[
"p",
"d2358d9221ff4f306a1d0db7aa3dcd9ea02994e7e1fc411a1a5485afc8947c24"
],
[
"p",
"7ea2399dc56d70c7a7d3ba329247dd2761955a28a4ab2ec59074596c6b5d84fe"
],
[
"proxy",
"https://microblog.shivering-isles.com/@sheogorath/112554413765568231",
"web"
],
[
"proxy",
"https://microblog.shivering-isles.com/users/sheogorath/statuses/112554413765568231",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://microblog.shivering-isles.com/users/sheogorath/statuses/112554413765568231",
"pink.momostr"
]
],
"content": "I'm all in on https-only and lets get rid of port 80 listens. But then I remember my Shelly Plugs which can't do https. They just download their firmware over from any HTTP URL you point them at.\n\n(And you can imagine how annoying it was, when I figured that out…)\n\nTo provide another war story, we recently switched internal root CAs for an general endpoint. Not every client took that well…\n\nHTTPS does improve security, but is complex enough to add unreliability.",
"sig": "ea9f9bedbd459469ca75c1ccce4ae2196819952888211afb79297dd9783569fb0f4f90712d71fbb1c35e6a47537e5f26086798aa1b2cf91c70dad9f5af2cf185"
}
