3 ms·
So let me get this straight: this is just the classic non-HTTPS traffic sniffing. I am not sure why Instagram isn't moving all calls to HTTPS. Instagram itself
by yeukhon 12y ago
So let me get this straight: this is just the classic non-HTTPS traffic sniffing.
I am not sure why Instagram isn't moving all calls to HTTPS. Instagram itself is not as complicated as Facebook and shouldn't really be bounded to HTTP so badly.
They can easily do 301/302 redirect to HTTPS, then perform HSTS (for browser, not for API calls) in addition and let the proxy like nginx handles it to their usual port 80 requests. Problem solved.
How much more work do they need to do to shift from HTTP to HTTPS? I just don't get it.
- frik 12y agoInstagram run on Amazon AWS, though Facebook finally moved Instagram to their own datacenters (as of June 2014) where FB use SSL hardware cards (cheaper than CPU and ELB for SSL on AWS). We also terminate our SSL at the ELB level, which lessens the CPU load on nginx. -- http://instagram-engineering.tumblr.com/post/13649370142/what-powers-instagram-hundreds-of-instances-dozens-of http://instagram-engineering.tumblr.com/post/13649370142/wha... http://www.zdnet.com/instagram-finally-picked-up-and-moved-from-aws-to-facebook-7000031014/ http://www.zdnet.com/instagram-finally-picked-up-and-moved-f... http://instagram-engineering.tumblr.com/post/89992572022/migrating-aws-fb http://instagram-engineering.tumblr.com/post/89992572022/mig...