Live data from Hacker News

Show HN: Kloudsec, Our Bootstrapped Anycast CDN with LetsEncrypt for Your Site

kloudsec.com

21–30 of 33 posts

Re: Show HN: Kloudsec, Our Bootstrapped Anycast CDN with LetsEncrypt for Your Site

#21
https://www.ssllabs.com/ssltest/analyze.html?d=kloudsec.com

Pretty good but not sure if you need a 4k cert (5651 bytes). That's quite a bit of overhead as well as there shouldn't be a need to send the root cert. Save yourself some traffic. Also, you could probably pare down the cipher list somewhat. The combo of DHE + 4k RSA is probably going to chew up a bunch of CPU unnecessarily.

But pretty nice so far.

Re: Show HN: Kloudsec, Our Bootstrapped Anycast CDN with LetsEncrypt for Your Site

#22
post #8
post #7

I see your website doesn't work without JavaScript.

Haha, yeah it's a one-page app. And truthfully, we regret splitting up the front-end/backend-API in the day 0 of development. It slowed our dev pace down. Lesson for startups, start with a monolithic app, split it later.

I had to whitelist your domain in NoScript. And also Cloudflare.com... Why are you using your competitors CDN service to serve some javascript on your site? All I saw was a blank page without the assets served from cloudflare's CDN. What kind of CDN are you?

Re: Show HN: Kloudsec, Our Bootstrapped Anycast CDN with LetsEncrypt for Your Site

#24

https://www.ssllabs.com/ssltest/analyze.html?d=kloudsec.com Pretty good but not sure if you need a 4k cert (5651 bytes). That's quite a bit of overhead as well as there shouldn't be a need to send the root cert. Save yourself some traffic. Also, you could probably pare down the cipher list somewhat. The combo of DHE + 4k RSA is probably going to chew up a bunch of CPU unnecessarily. But pretty nice so far.

More importantly their 4096 bit certificate is signed by a 2048 bit intermediary certificate, so there is no additional security over 2048 bits.

Re: Show HN: Kloudsec, Our Bootstrapped Anycast CDN with LetsEncrypt for Your Site

#29

https://www.ssllabs.com/ssltest/analyze.html?d=kloudsec.com Pretty good but not sure if you need a 4k cert (5651 bytes). That's quite a bit of overhead as well as there shouldn't be a need to send the root cert. Save yourself some traffic. Also, you could probably pare down the cipher list somewhat. The combo of DHE + 4k RSA is probably going to chew up a bunch of CPU unnecessarily. But pretty nice so far.

https://tls.imirhil.fr/https/kloudsec.com

SSL Labs is nice, but a bit permissive, not sure anyone really needs 3DES nowadays.

Post reply on HN