| 00:37 | <MikeSmith> | XhmikosR: dunno, but I’ve pinged the systems team to ask |
| 09:29 | <MikeSmith> | XhmikosR: “due to IE support of HSTS but not of UIR” |
| 09:30 | <XhmikosR> | MikeSmith: I don't quite follow |
| 09:31 | <XhmikosR> | IE 11 supports HSTS IIRC |
| 09:31 | <MikeSmith> | yeah |
| 09:31 | <MikeSmith> | but it doesn’t support Upgrade-Insecure-Requests |
| 09:32 | <XhmikosR> | ok I guess I will tell them to switch to another UA |
| 09:34 | <MikeSmith> | yeah the issue is that the w3.org site has tens of thousands or whatever documents with <img> and <a> etc elements with insecure http URLs |
| 09:35 | <MikeSmith> | so the site relies on Upgrade-Insecure-Requests support |
| 09:35 | <MikeSmith> | otherwise all those pages would be mixed content |
| 09:35 | <MikeSmith> | if they are served as https |
| 12:52 | <foolip> | annevk: did you notice https://travis-ci.org/whatwg/notifications/builds/413968774? it seems like the change was deployed, but maybe the failure is still bad? |
| 12:56 | <annevk> | foolip: I think I forgot about it |
| 13:05 | <annevk> | foolip: I didn't, but I never got review from Domenic in https://github.com/whatwg/notifications/pull/141 |
| 13:05 | <annevk> | foolip: I guess I'll just land my fix |
| 13:06 | <foolip> | annevk: thanks! |
| 13:06 | <foolip> | there are two more red things in https://travis-ci.org/whatwg. MikeSmith do you know about the wattsi one? |
| 13:08 | <annevk> | foolip: did you change the key of the WHATWG server? |
| 13:08 | <annevk> | foolip: see https://travis-ci.org/whatwg/notifications/builds/466987961 |
| 13:08 | <foolip> | annevk: not intentionally, I did redirect traffic to a clone of marquee in order to upgrade it though. I'll revert and check. |
| 13:10 | <foolip> | annevk: I've restarted the job and will see if that fixes the problem. |
| 13:10 | <foolip> | I assumed that a perfect clone with the same external IP would be indistinguishable |
| 13:11 | <foolip> | Deploy worked, but since I restarted the job I can't read the old one :( |
| 13:11 | <annevk> | foolip: the old one claimed a key mismatch of sorts |
| 13:12 | <annevk> | foolip: and actually recommended clearing the existing set of hosts... |
| 13:13 | <foolip> | annevk: I don't quite understand how that could happen, but OK. Perhaps a machine knows its IP and includes that in its key somehow, dynamically as opposed to just serving the bits on disk? |
| 13:13 | <annevk> | I wouldn't know |
| 13:15 | <foolip> | annevk: the clone was serving traffic correctly, however. I'll give it another try now, just need to restart the machine without dropping traffic. if something is deployed during the switch I'll restart those after. |
| 13:16 | foolip | wonders how real sysadmins do this, other than building on stuff like AWS and GCP |
| 13:22 | <foolip> | alright, marquee is updated! |
| 17:05 | <TabAtkins> | foolip: These days a lot of "real" sysadmins do just build stuff on AWS. ^_^ |
| 17:40 | nox | is sad about Amazon and other monopolies. |
| 21:04 | <TimothyGu> | Hmm, could someone point me to where URL list got added to request? |
| 21:04 | <TimothyGu> | just trying to understand what it's for |
| 21:49 | <Mek> | TimothyGu: https://github.com/whatwg/fetch/commit/1d8173afffcffad2587f2922381878939c9cebea added URL list supposedly because CSP needs it |
| 21:50 | <TimothyGu> | Mek: thx |
| 21:50 | <TimothyGu> | Ooh this is old, thought it was a recent change |