3 ms·
> An actual website (meaning text, images and little more) doesn't really need all the fancy frameworks OP's talking about. Sure, but you still need: - a serv
by moviuro 8y ago
> An actual website (meaning text, images and little more) doesn't really need all the fancy frameworks OP's talking about.
Sure, but you still need:
- a server/reverse proxy (h2o, apache, nginx, httpd, etc.), in which you correctly set tons of things, such as headers [0], https (acme.sh? or acme-client?)
- haproxy for IPv4/IPv6 if you want to live in the future, but still be available to people living in the past century [1]
Default versions and settings are still broken (SSL still enabled in 2018, etc.)... Mozilla does help though by publishing some sane templates [2].
In the end, it's not quite as complex as webapps, but still very far from trivial.
[0] https://securityheaders.com/?q=try.popho.be&followRedirects=on https://securityheaders.com/?q=try.popho.be&followRedirects=... for my own static blog, https://securityheaders.com/?q=https%3A%2F%2Fwww.hellobank.fr%2F&followRedirects=on https://securityheaders.com/?q=https%3A%2F%2Fwww.hellobank.f... & https://securityheaders.com/?q=particuliers.secure.lcl.fr&followRedirects=on https://securityheaders.com/?q=particuliers.secure.lcl.fr&fo... for French banks...
[1] https://try.popho.be/https.html https://try.popho.be/https.html
[2] https://mozilla.github.io/server-side-tls/ssl-config-generator/ https://mozilla.github.io/server-side-tls/ssl-config-generat... and https://wiki.mozilla.org/Security https://wiki.mozilla.org/Security
- klez 8y agoTrue, but you can still get a ton of mileage from a simple managed web hosting solution and (if you feel fancy) cloudfront. My point is that this whole post reeks a bit of YAGNI. Or, at least, that we're not talking about "simple websites". If it's the latter, of course, it's a whole different story. But we should call websites "websites" and web applications "web applications". This would also avoid those "the web sucks" arguments that make comments think an article is thinking about the web as "a way to exchange information" instead of "a platform to distribute system-agnostic applications".