It's 2017, could we please not discuss if a patchwork of free insecure HTTP mirrors is an acceptable software distribution strategy?
-
-
Start with an HTTPS distribution site you control. Then worry about whatever you want. But HTTPS is base-base-base-line.
-
Controlling a site with the needed capacity may be hard for some, though.
-
For a week enough concept of control, I don't buy it. GitHub or Cloudflare are more accountable than random 3rd party mirrors.
-
Yes, but direct use of CF requires giving up some control of your domain's signing key, which I can understand projects being hesitant to do
-
Maybe promotion of just using it for dl.* not whole site would make sense.
-
NS record on the .cdn. subdomain
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.