ThinkServer:News: Difference between revisions

m Latest Server News: Removed superfluous word
m Latest Server News: Typo correction
 
(One intermediate revision by the same user not shown)
Line 28: Line 28:


* TLS 1.3 support for our web pages. TLS 1.2 is still supported as TLS 1.3 is new but we do not support any lower than TLS 1.2.
* TLS 1.3 support for our web pages. TLS 1.2 is still supported as TLS 1.3 is new but we do not support any lower than TLS 1.2.
* Letencrypt allow for wildcard certificates, which have allowed us more flexibility with the use of our certificates. We are also using ECDSA certificates using acme.sh to implement them.
* Letsencrypt now allow for wildcard certificates, which have allowed us more flexibility with the use of our certificates. We are also using ECDSA certificates using acme.sh to implement them.
* Strongswan is now implemented with the new charon interface, which is much more flexible and modular than the old ipsec interface (this was a learning curve, but we got there!)
* Strongswan is now implemented with the new charon interface, which is much more flexible and modular than the old ipsec interface (this was a learning curve, but we got there!)
* Our domain is now https://www.freddythechick.net. Due to the nature of our internet connection, we needed DDNS support and have had to move from Gandi to Google Domains. This address is secured for the next 2 years.
* Our domain is now https://www.freddythechick.net. Due to the nature of our internet connection, we needed DDNS support and have had to move from Gandi to Google Domains. This address is secured for the next 2 years.
Line 65: Line 65:
== HTTP/2 Support ==
== HTTP/2 Support ==


We have enabled HTTP/2 support on the server when used with https. <s>We only have a self signed certificate at the moment so an exception needs to be created</s>, but after that, you should notice that the site is now overall faster than before. You will need a modern browser to take advantage, however with an older browser, the site should still work.
We have enabled HTTP/2 support on the server when used with https. <s>We only have a self signed certificate at the moment so an exception needs to be created, but after that,</s> you should notice that the site is now overall faster than before. You will need a modern browser to take advantage, however with an older browser, the site should still work.


--[[User:Sam|Sam]] ([[User talk:Sam|talk]]) 20:12, 11 April 2016 (UTC)
--[[User:Sam|Sam]] ([[User talk:Sam|talk]]) 20:12, 11 April 2016 (UTC)