Re: HTTPS support for geo DNS mirrors
| From: | Rasmus Lerdorf | Date: | Thu, 20 Aug 2015 00:16:36 +0000 |
| Subject: | Re: HTTPS support for geo DNS mirrors | ||
| References: | 1 2 3 4 5 | Groups: | php.mirrors |
| Request: | Send a blank email to php-mirrors+get-40572@lists.php.net to get a copy of this message | ||
On 08/19/2015 02:23 PM, Michael Fincham wrote:
> On Wed, 19 Aug 2015 07:47:46 -0700, Hannes Magnusson <hannes.magnusson@gmail.com> wrote:
>> mirror should have https disabled
>
> Fair enough. This may take us a little while to implement - our mirror system hosts a few other
> sites and I suspect we'll need to add a dedicated IP for the PHP virtual host.
This is a bit annoying for ISPs. It would be nice if there was something
in SNI to help here, but I don't think there is.
We obviously can't distribute the private key for out wildcard *.php.net
cert out to every mirror, but maybe we should consider writing something
that could generate per-mirror certs for mirrors to get around this
problem and have the config either redirect to non-https or to
https://secure.php.net
-Rasmus
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc