话说 V2EX 不开启 HSTS 的原因是什么? - V2EX
V2EX = way to explore
V2EX 是一个关于分享和探索的地方
Sign Up Now
For Existing Member  Sign In
sumhat
V2EX    V2EX

话说 V2EX 不开启 HSTS 的原因是什么?

  •  
  •   sumhat Feb 27, 2015 5802 views
    This topic created in 4080 days ago, the information mentioned may be changed or developed.
    CDN 的速度问题?
    16 replies    2015-03-02 19:37:04 +08:00
    bitinn
        1
    bitinn  
       Feb 27, 2015
    同样,倡议HSTS,此外v2ex的SSL配置也可以调整下了,既然不打算绕开,就当是顺便提高安全性吧。
    myliyifei
        2
    myliyifei  
       Feb 27, 2015
    HSTS难道不是浏览器内置的LIST吗?网站可以开启?
    yfdyh000 div class="fr">     3
    yfdyh000  
       Feb 27, 2015
    @myliyifei 去翻百科吧,本来就是网站的协议,Chrome的那个列表算是个增强的自定义扩展/模块。
    Livid
        4
    Livid  
    MOD
    PRO
       Feb 27, 2015
    HSTS 这个我还没研究过,我研究一下。

    不过这次这个事情,我真心不想做任何折腾手段。就这样吧。
    liuchen9586
        5
    liuchen9586  
       Feb 27, 2015
    @myliyifei 可以,Nginx可以在config文件里面设置HSTS超时时间。
    mtglichking
        6
    mtglichking  
       Feb 27, 2015 via iPhone
    支持开启 HSTS,甚至是 PFS
    zjgood
        7
    zjgood  
       Feb 27, 2015 via Android
    强制加密,
    关闭注册。
    我觉得v2ex已经饱和了,关闭注册一段时间,积淀一下也好
    kn007
        8
    kn007  
       Feb 27, 2015
    @zjgood 你丫的不换头像不行么
    bitinn
        9
    bitinn  
       Feb 27, 2015
    @Livid dead simple, just some nginx config, use https://www.ssllabs.com/ssltest/ as a guide
    xiaolvmu
        10
    xiaolvmu  
       Feb 28, 2015 via Android
    突发奇想,想让我做的网站采用 PFS……
    话说,openssl dhparam -out dh4096.pem 4096 需要好长时间呢……还没搞完。
    FaithfulMind
        11
    FaithfulMind  
       Feb 28, 2015
    支持,我现在是手动添加的
    JackNo1
        12
    JackNo1  
       Feb 28, 2015
    @FaithfulMind 我也是吧https://v2ex.com加入收藏了。
    xiaozhizhu1997
        13
    xiaozhizhu1997  
       Feb 28, 2015 via Android
    我在chrome://net-internals里面hsts下把v2ex.com直接加进去了,chrome自动转为s。
    c153747477
        14
    c153747477  
       Feb 28, 2015
    啥?我能开hsts啊..
    ryd994
        15
    ryd994  
       Mar 1, 2015 via Android
    该来的总会来,想躲也躲不了
    thekll
        16
    thekll  
       Mar 2, 2015
    Chrome,在HSTS添加v2ex.com,直接输入v2ex.com会强制https,但搜索结果里点击链接还是http;
    Safari(Yosemite)直接给~/Library/Cookies/HSTS.plist加?
    About     Help     Advertise     Blog     API     FAQ     Solana     3097 Online   Highest 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 69ms UTC 10:45 PVG 18:45 LAX 03:45 JFK 06:45
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86