Live data from Hacker News

Free static websites with SSL for hackers

rolodato.com

31–36 of 36 posts

Re: Free static websites with SSL for hackers

#31

For static sites hosting on AWS S3 is super cheap, plus with Cloudfront CDN in front you can be sure your site is being delivered to the user by a server near him. It's not 100% free but still very cheap for static websites[1] [1] https://medium.com/@sbuckpesch/setup-aws-s3-static-website-h...

At some point, I'm going to convert my web site (a neglected blog) to a static site. When I do, I'll likely go the S3 + Cloudfront route and retire the aging physical server it's running on. I've looked into this a couple of times in the past and that's the method I kept coming up with. I really want to do it but I've had trouble motivating myself to redo the hundreds of blog posts currently in WordPress.

You can try using an exporter to see how much more work you'll have to do to make the new static version work to your liking.

https://gohugo.io/tools/migrations/#wordpress https://import.jekyllrb.com/docs/wordpress/

Re: Free static websites with SSL for hackers

#33
post #11

Earlier quoted context omitted.

End-to-end secure, but only against passive attacks. Cloudflare "Full SSL" (as opposed to "Strict SSL") does not verify the certificate presented by the origin server, so someone sitting between Cloudflare and your origin can still MITM the connection without detection. Strict SSL does not currently work with GitHub Pages, because "*.github.io" certs do not match custom domains. https://www.cloudflare.com/ssl/ https:…

We're working on making Strict mode work better in such situations. For example, if the origin server presents a certificate with a SAN for *.github.io and you have a CNAME to yourusername.github.io, this will (soon) validate as Strict.

Wow this is great news! As someone who finds GitHub Pages with Cloudflare nearly perfect for my simple site, this change would make it even more so!

Re: Free static websites with SSL for hackers

#34

For static sites hosting on AWS S3 is super cheap, plus with Cloudfront CDN in front you can be sure your site is being delivered to the user by a server near him. It's not 100% free but still very cheap for static websites[1] [1] https://medium.com/@sbuckpesch/setup-aws-s3-static-website-h...

At some point, I'm going to convert my web site (a neglected blog) to a static site. When I do, I'll likely go the S3 + Cloudfront route and retire the aging physical server it's running on. I've looked into this a couple of times in the past and that's the method I kept coming up with. I really want to do it but I've had trouble motivating myself to redo the hundreds of blog posts currently in WordPress.

There are plugins for Wordpress which export sites as static sites. I personally used SimplyStatic [1] with success for a rather simple blog, but it seems development has ceased. While writing this comment I also found WP Static [2], perhaps one of those two works for you.

[1]: https://wordpress.org/plugins/simply-static/

[2]: https://wordpress.org/plugins/static-html-output-plugin/

Re: Free static websites with SSL for hackers

#36
post #35

If i read free i mean free as in everything, but it seems you already need to have your own custom domain name. Meaning your own domain. Or did i miss something?

Yes, you need it. This topic is just to have SSL and free static host where GitHub just have a painful setup for that (also if you want custom domain here you need pay for it, obviously) https://github.com/isaacs/github/issues/156
Post reply on HN