Earlier quoted context omitted.
1 raspberry pi 4 could handle this...
On whose internet?
[deleted]
NeverSSL
171–180 of 206 posts
Re: NeverSSL
#172There's actually an RFC on a DHCP option for captive portal advertisement.
https://tools.ietf.org/html/rfc7710
Not a single OS or browser has bothered to implement it. Instead they all idiotically try all kinds of bs trying to figure out if a redirect is occurring.
Re: NeverSSL
#173Mamma mia, this is so wrong and so bad on so many levels. So instead of fixing the borked captive portal (there are other ways of intercepting the connections not requiring messing with encryption) we tell users to disable encryption? Somewhere on a public wifi where you actually need it the most?!
Holy cow ...
Re: NeverSSL
#174If you’re using a mainstream OS that automatically detects standard captive portals, the main reason why you’ll need this is for “tiered” captive portals like the ones offered on some airplanes. Those tiered captive portals have unique requirements that conflict with OS behavior: A) By default, they want to offer some limited Internet access, such as accessing a sponsored site (often a shopping site like Amazon) or s…
But how do you discover which sites are available on the free tier? Better to just serve the portal page to everyone, inform them, and let them select. Although actually I would like all those portal pages to disappear.
How do you serve the captive portal page to a user if you don't control a valid certificate for it and it uses HSTS?
Re: NeverSSL
#175Earlier quoted context omitted.
That page says 6 million hits per day.
1 raspberry pi 4 could handle this...
Who's opinion carries more merit regarding how a thing can be built? Someone who has built the thing or someone who hasn't?
I'm continually stupefied by how willing so many HN commenters are to publically advertise their ignorance by giving useless advice to actual experts.
Re: NeverSSL
#176Earlier quoted context omitted.
The owner is Colm MacCárthaigh https://twitter.com/colmmacc . He's a Senior Principal Engineer at AWS Networking and is the author of s2n - https://github.com/awslabs/s2n . I'm pretty sure he knows what he's doing and it costs what it costs for a reason.
Maybe, but there are a bunch of smart folks here too, and no one can come up with a good reason for this costing $2k/year. It's possible $166/mo is not enough of a hit on his income so as to be worth spending time optimizing (unlikely considering how little time it'd seemingly take to optimize), or since he works for AWS it could be sponsored (which would mean he has to justify the continued cost to his bosses when t…
You know what else no one here has done? Built something cheaper and posted a link.
Re: NeverSSL
#177Earlier quoted context omitted.
it's not cache-busting, it's captive-portal busting. there's no reason it couldn't be cached on some service that charges less for bandwidth than AWS does.
Although yours is a valid reason, but I’ve had a colleague of mine who isn’t savvy enough to use this when they need to connect, but they told me they stopped using it because it would show them the page even though they haven’t connected yet because their browser cached the page somehow. I’ve adjusted by using a private/guest browsing mode to open this page but the cache busting cuts it easier for people who have no…
Ctrl-shift-R solves that?
Re: NeverSSL
#178http://neverssl.com/changes > I also want to keep neverssl.com ad free, but as it's now costing me about $2,000 a year to host it, […] Wait, how could hosting a static website cost $2k/year?!
What a waste of money. The code is hosted on GitHub and it takes 1 minute to move the site to GitHub Pages.
$0/year, forever.
Re: NeverSSL
#179http://neverssl.com/changes > I also want to keep neverssl.com ad free, but as it's now costing me about $2,000 a year to host it, […] Wait, how could hosting a static website cost $2k/year?!
The website redirects to a random subdomain which could explain the cost, but even then 2k sounds like a lot.
Re: NeverSSL
#180Earlier quoted context omitted.
Maybe, but there are a bunch of smart folks here too, and no one can come up with a good reason for this costing $2k/year. It's possible $166/mo is not enough of a hit on his income so as to be worth spending time optimizing (unlikely considering how little time it'd seemingly take to optimize), or since he works for AWS it could be sponsored (which would mean he has to justify the continued cost to his bosses when t…
You know what else no one here has done? Built something cheaper and posted a link.
Why would I as a user care to use that instead?