I thought that the .dev extension had mandatory HTTPS due to HSTS preload. Yet, this loads as "Not Secure" HTTP for me.
Y Combinator Resources for Developers
51–60 of 129 posts
Re: Y Combinator Resources for Developers
#52I thought that the .dev extension had mandatory HTTPS due to HSTS preload. Yet, this loads as "Not Secure" HTTP for me.
According to https://get.dev/#benefits:
>The .dev top-level domain is included on the HSTS preload list, making HTTPS required on all connections to .dev websites and pages without needing individual HSTS registration or configuration.
What browser are you using that you are not redirected to https://yc.dev?
>Most major browsers (Chrome, Firefox, Opera, Safari, IE 11 and Edge) also have HSTS preload lists based on the Chrome list. (See the HSTS compatibility matrix.)
Re: Y Combinator Resources for Developers
#53The https://scaphold.io/ URL is down.
They were acquired by AWS and rolled into AppSync
Re: Y Combinator Resources for Developers
#54Earlier quoted context omitted.
It would be nice if there was an "Ask a Male Engineer" blog section also to get a more diverse viewpoint. It would be interesting to see the differences or similarities in opinions, perspectives and experiences of both genders. Or maybe just an "Ask an Engineer" blog where both genders' views are provided.
I don't know if you're being sarcastic or not, but I think we all know that "ask an engineer" means "ask a male engineer" 99% of the time. Edit: I was just guessing at the ratio of male to female engineers, so maybe I overestimated the imbalance, but I think the point stands.
I mean, it looks like 21% of all engineering degrees went to women, which is the easiest way to guesstimate the job data (and is generally how they guess the percentage of women in the workplace, along with questionaires). I get that you're being pedantic, before you start to explain yourself, but still.
EDIT: Maybe tax forms, but I'm not sure the legality of that... but I think it's still the census.
Re: Y Combinator Resources for Developers
#55I thought that the .dev extension had mandatory HTTPS due to HSTS preload. Yet, this loads as "Not Secure" HTTP for me.
According to https://get.dev/#benefits : >The .dev top-level domain is included on the HSTS preload list, making HTTPS required on all connections to .dev websites and pages without needing individual HSTS registration or configuration. What browser are you using that you are not redirected to https://yc.dev ? >Most major browsers (Chrome, Firefox, Opera, Safari, IE 11 and Edge) also have HSTS preload lists based on…
iOS Safari (and other iOS browsers) auto redirects to http://ycombinator.dev/
Re: Y Combinator Resources for Developers
#56I'd love to scan down the relevant YC companies list, but it's really hard for a human to visually parse: https://i.imgur.com/1u457oA.jpg A little white space would be helpful.
Agreed. Just adding some bottom padding to the table cells does wonders for readability: https://imgur.com/9FBgrT9
Exactly. With good padding and a bit of extra white space and maybe a faint border, it would be possible to notice that the description for Airship (w2018) is missing.
I would have done something like this: https://i.imgur.com/Ck96siZ.jpg
Re: Y Combinator Resources for Developers
#57Wish they didn't use the .dev extension. It should be developers.ycombinator.com
Yeah, have to update my local DNS routes. I had .dev pointed to 127.0.0.1
This has been the topic of HN for the past few days for anything .dev.
You should be using .test or .localhost for any development domains: https://tools.ietf.org/html/rfc2606#section-2
Re: Y Combinator Resources for Developers
#58Earlier quoted context omitted.
According to https://get.dev/#benefits : >The .dev top-level domain is included on the HSTS preload list, making HTTPS required on all connections to .dev websites and pages without needing individual HSTS registration or configuration. What browser are you using that you are not redirected to https://yc.dev ? >Most major browsers (Chrome, Firefox, Opera, Safari, IE 11 and Edge) also have HSTS preload lists based on…
iOS Safari (and other iOS browsers) auto redirects to http://ycombinator.dev/
Strange. I wouldn't expect that, because according to https://caniuse.com/#feat=stricttransportsecurity, the latest versions of Chrome and Safari for iOS do support Strict Transport Security.
Re: Y Combinator Resources for Developers
#59Earlier quoted context omitted.
According to https://get.dev/#benefits : >The .dev top-level domain is included on the HSTS preload list, making HTTPS required on all connections to .dev websites and pages without needing individual HSTS registration or configuration. What browser are you using that you are not redirected to https://yc.dev ? >Most major browsers (Chrome, Firefox, Opera, Safari, IE 11 and Edge) also have HSTS preload lists based on…
iOS Safari (and other iOS browsers) auto redirects to http://ycombinator.dev/
Can you confirm that it's not rewriting the URL to https://yc.dev first before issuing a request to the network? It's possible that Safari has suffered some kind of regression. This definitely used to work at some point.
I can confirm here in Chrome and Firefox that the URL is rewritten internally to https://yc.dev (which then redirects to https://ycombinator.dev), so no unencrypted traffic is ever sent over the network.
Re: Y Combinator Resources for Developers
#60Is Paul Graham and Robert Morris's Arc language[a] being used for anything in production other than Y Combinator websites? [a] http://arclanguage.org/
I'm curious about this too.
There still seems to be interest in the project. The forum gets new topics posted every few days [1] and Anarki, a community ran fork of Arc, shows recent commits [2].