HTTPS By Default For Everyone

[phoronix]

Phoronix: HTTPS By Default For Everyone

Just a quick heads up for those that haven't noticed yet, HTTPS is now used by default across all of Phoronix.com as of this week...

http://www.phoronix.com/scan.php?page=news_item&px=HTTPS-Default-Everyone

[R41N3R]

Thanks

[lucrus]

Michael just in case you didn't know, there are LetsEncrypt certificates that are free and, more than that, relieve you of the burden of manual updates.

[nazar-pc]

I'd suggest to setup automated certificates renewal with Lets Encrypt and enable HSTS.
Also Firefox still says there is HTTP content on the Forum that was blocked.

[RSpliet]

Michael Good effort! Tiny remark: the "Phoronix" logo at the top of this forum (this one) page is still loaded through http. As a result, Firefox gives a little warning symbol in the address bar when visiting this page. The image seems to be available through https too, so perhaps all it takes is a simple change of the URL somewhere in the vbulletin settings.

[macemoneta]

Chrome reports: This page is trying to load scripts from unauthenticated sources.

[boxie]

SSL Labs even gives it an A-

https://www.ssllabs.com/ssltest/analyze.html?d=www.phoronix.com

Not bad at all!

[Michael]

Michael Good effort! Tiny remark: the "Phoronix" logo at the top of this forum (this one) page is still loaded through http. As a result, Firefox gives a little warning symbol in the address bar when visiting this page. The image seems to be available through https too, so perhaps all it takes is a simple change of the URL somewhere in the vbulletin settings.

Yeah unfortunately this new vBulletin theme is a mess and haven't been able to track down the URL source yet even when grepping all the files and searching the DB, but haven't spent too much time on it.

[cl333r]

I was wondering (and I'm no expert), doesn't storing the articles by name in one big database table make them linearly more expensive to find as their count grows? I'm judging from the url params:
"page=news_item&px=HTTPS-Default-Everyone"

[mmstick]

You should also enable Brotli compression to save bandwidth. By enabling HTTPS, you may now also use Brotli.