On Tue, Oct 26, 2021 at 3:00 PM, Anurag Thakur <[email protected]> 
wrote:

>> is there is any way the http version of the site can be preserved in any way
>
> I think this is possible, however I don't know if we should be doing that, 
> http is generally frowned upon nowadays.

according to who? Https will still be there, it’s just that both will be there. 
Chrome and modern browsers will automatically redirect to https even if the 
http version is working.

There is alot of money involved with https :) so of course you’ll hear stuff 
like http is bad always when it’s not. For a read only site like freetype.org 
it’s perfectly fine. For a bank or shopping site than https enforcement is 100 
necessary.

And keep in mind that the site was like this before. I am not against HTTPS I 
just think that both should be there. Our peers have both up like before.

>> so older laptops and devices and access the site before.
>
> I don't know enough to decide if this claim is grounded in reality, but I 
> have a feeling this shouldn't be a problem, old devices can use modern 
> browsers, right?

the browser is not the problem, more so the certificates. The older devices may 
not have the newer certificate installed, since https providers have to pay 
browser companies to include it, and sometimes it’s hard for people to update 
their browsers.

> Since I don't know the impact of not supporting http might have, I would like 
> some feedback:
>
> [@Werner LEMBERG](mailto:[email protected]) and [@Alexei 
> Podtelezhnikov](mailto:[email protected]) what do you guys think🤔

Yes, it should ultimately be up to Werner and Alexei. They will know best.

Remember it’s supporting BOTH systems, not having http only. An http only site 
is craziness and is not a very good idea in 2021, I will agree with that.

> Anurag
>
> On Wed, 27 Oct, 2021, 12:16 AM Bermler, <[email protected]> wrote:
>
>> By the way, is there is any way the http version of the site can be 
>> preserved in any way? Before the migration it was there. Basically both the 
>> http and https versions of the site should remain open instead of just https 
>> with http redirecting to https. It should be possible with Cloudflare.
>>
>> Many of our peers (zlib, varnish cache software, libpng) are using the http 
>> and https structure and I like this way so older laptops and devices and 
>> access the site before. The Cloudflare cert are new and older devices may 
>> not have its certification installed.
>>
>> On Tue, Oct 26, 2021 at 1:25 PM, Anurag Thakur <[email protected]> 
>> wrote:
>>
>>> Well, changing to cloudflare was just a 2 line change, and if it gives us 
>>> worldwide superfast CDN for free, I don't see any reason not to use it :)
>>>
>>> Regards
>>> Anurag
>>>
>>> On Tue, 26 Oct, 2021, 10:50 PM Bermler, <[email protected]> wrote:
>>>
>>>> I don’t think having the site behind Cloudflare is necessary at least for 
>>>> now. It should just point directly to gitlab. After all didn’t we say 
>>>> small steps?
>>>>
>>>> Sent from ProtonMail for PinePhone
>>>>
>>>> On Tue, Oct 26, 2021 at 12:30 PM, Anurag Thakur 
>>>> <[email protected]> wrote:
>>>>
>>>>> As discussed with the maintainers, the freetype.org domain hosting has 
>>>>> been changed to gitlab pages, along with cloudflare CDN.
>>>>>
>>>>> Currently the gitlab pages are hosted on gitlab.com, via this repo:
>>>>>
>>>>> https://gitlab.com/freetype/freetype-web
>>>>>
>>>>> I chose gitlab.com instead of freedesktop.org since it was the easiest 
>>>>> way to make sure that the website is uninterrupted while we work on the 
>>>>> redesign, and it simultaneously allowed me to do the migration to 
>>>>> gitlab+cloudflare.
>>>>>
>>>>> After the redesign is complete, changing the hosting to freedesktop.org 
>>>>> would just require modifying 2 DNS records.
>>>>>
>>>>> Please note that all development should happen on the freedesktop.org 
>>>>> repo:
>>>>>
>>>>> https://gitlab.freedesktop.org/freetype/freetype-web
>>>>>
>>>>> Do NOT send any MRs/commit to the gitlab.com repo.
>>>>>
>>>>> I would like to request the maintainers to clear any config left on the 
>>>>> previous hosting platform/any shell scripts used to manage the website, 
>>>>> since it's all managed by gitlab pages now.
>>>>>
>>>>> Happy to answer any questions
>>>>>
>>>>> Regards
>>>>> Anurag

Reply via email to