Rosetta Code:Village Pump/Upgrades (2011): Difference between revisions

Yeah, I heard about it.
(prep list, js load, infrastructure)
(Yeah, I heard about it.)
 
(One intermediate revision by one other user not shown)
Line 10:
* IPv6. If you look, you'll notice prgmr2.rosettacode.org has a AAAA record as well as an A record. While prgmr1 has a public, global-scope IPv6 address, squid2 doesn't support IPv6, so I can't simply flip a switch and turn it on--if I add the AAAA record, RC will break for clients with native IPv6. prgmr2 is running squid3, which does support IPv6. The IPv6 stuff is already in place and working on prgmr2 to the same extent IPv4 stuff works on prgmr2. --[[User:Short Circuit|Michael Mol]] 00:11, 7 October 2011 (UTC)
* TLS. If you haven't heard of Firesheep, well, you should go read up on it. If you haven't heard of TLS, think of it as 'SSL version 3 and up.' Session hijacking has become child's play, and the techniques have been packaged up enough for script kiddies. It's easy to say that it's on users to not use open wifi networks and the like, but it's really not practical. I've now got a class 2 identity cert and a class 1 server cert. I'll be getting a class 2 server cert just as soon as I get things working with the class 1 cert. I'll be able to set up a *.rosettacode.org cert, and that'll be good. ''This is the part that's currently blocking me.'' Not getting the class 2 cert, but getting Apache and squid to play nice while putting a TLS front on things. --[[User:Short Circuit|Michael Mol]] 00:11, 7 October 2011 (UTC)
::I assume you've heard of [http://www.theregister.co.uk/2011/09/19/beast_exploits_paypal_ssl/ the BEAST]? Short version: TLS 1.0 broken; TLS 1.1+ ok but not yet widely-supported. -- [[User:Eriksiers|Erik Siers]] 03:12, 7 October 2011 (UTC)
:::I heard about it. It doesn't change the need to begin deployment. --[[User:Short Circuit|Michael Mol]] 03:16, 7 October 2011 (UTC)
 
* Apache server upgrades. Nothing special here. --[[User:Short Circuit|Michael Mol]] 00:11, 7 October 2011 (UTC)
* MySQL server upgrades. Nothing special here. --[[User:Short Circuit|Michael Mol]] 00:11, 7 October 2011 (UTC)
Line 22 ⟶ 25:
'''Additional requests:'''
*I'd like [http://www.mediawiki.org/wiki/Extension:CategoryTree Category Tree] if you don't think it will break things. SMW may be able to replace most categories, but that has been going slow. Since we have categories inside categories inside categories right now, I think it would speed things up for new users. --[[User:Mwn3d|Mwn3d]] 00:48, 7 October 2011 (UTC)
::I second this. -- [[User:Eriksiers|Erik Siers]] 03:12, 7 October 2011 (UTC)