1. 3

    Does lighttpd do TLS 1.3 already?

    1. 1

      Lighttpd supports TLS/SSL using openssl.

      1. 5

        That wasn’t really an answer to that question :)

        1.  

          It can, depending on the support of the version of OpenSSL you link it with.

          Edit: For example, I believe that TLS 1.3 requires OpenSSL 1.1.1+ — since my main lighttpd server is running RHEL7 and because I don’t desire to maintain a non-distribution OpenSSL, I’m limited to TLS 1.2 as RHEL7 packages a fork of OpenSSL 1.0.2k. RHEL8 will include support for TLS 1.3.

          1.  

            I thought they had different APIs internally within OpenSSL, but I might be wrong

            1.  

              There is a small change that is required for TLS 1.3 in version 1.4.50 and below, but there should be no legitimate need to run the older versions.

              1.  

                You’re right, there are API changes in OpenSSL 1.1.0

      1. 15

        After the recent announcement of the F5 purchase of NGINX we decided to move back to Lighttpd.

        Would be interesting to know why instead of just a blog post which is basically an annotated lighthttpd configuration.

        1. 6

          If history has taught us anything, the timeline will go a little something like this. New cool features will only be available in the commercial version, because $$. The license will change, because $$. Dead project.

          And it’s indeed an annotated lighttpd configuration as this roughly a replication of the nginx config we were using and… the documentation of lighttpd isn’t that great. :/

          1. 9

            The lighttpd documentation sucks. Or at least it did three years ago when https://raymii.org ran on it. Nginx is better, but still missing comprehensive examples. Apache is best, on the documentation font.

            I wouldn’t move my entire site to another webserver anytime soon (it runs nginx) but for new deployments I regularly just use Apache. With 2.4 being much much faster and just doing everything you want, it being open source and not bound to a corporation helps.

            1. 1

              Whatever works for you. We used to run our all websites on lighttpd, before the project stalled. So seemed a good idea to move back, before nginx frustration kicked in. :)

              1. 3

                Im a bit confused. You’re worried about Nginx development stalling or going dead in the future. So, you switched to one that’s already stalled in the past? Seems like the same problem.

                Also, I thought Nginx was open source. If it is, people wanting to improve it can contribute to and/or fork it. If not, the problem wouldn’t be the company.

                1. 2

                  The project is no longer stalled and if it stalls again going to move, again. Which open source project did well after the parent company got acquired?

                  1. 3

                    I agree with you that there’s some risk after a big acquisition. I didnt know lighttpd was active again. That’s cool.

                    1. 2

                      If it was still as dead as it was a couple of years ago I would have continued my search. :)

                      1. 1

                        Well, thanks for the tip. I was collecting lightweight servers and services in C language to use for tests on analysis and testing tools later. Lwan was main one for web. Lighttpd seems like a decent one for higher-feature server. I read Nginx was a C++ app. That means I have less tooling to use on it unless I build a C++ to C compiler. That’s… not happening… ;)

                        1.  

                          nginx is 97% C with no C++ so you’re good.

                          1.  

                            Thanks for correction. What’s other 3%?

                            1.  

                              Mostly vim script with a tiny bit of ‘other’ (according to github so who knows how accurate that is).

                              1.  

                                Alright. I’ll probably run tools on both then.

                                1.  

                                  Nginx was “heavily influenced” by apache 1.x; a lot of the same arch, like memory pools etc. fyil

                    2. 2

                      SuSE has been going strong, and has been acquired a few times.

                      1.  

                        SuSE is not really an open-source project though, but a distributor.

                        1.  

                          They do have plenty of open-source projects on their own, though. Like OBS, used by plenty outside of SuSE too.

              2. 5

                It’s a web proxy with a few other features, in at least 99% of all cases.

                What cool new features are people using?

                Like, reading a few books on the topic suggested to me that despite the neat things Nginx can do we only use a couple workhorses in our daily lives as webshits:

                • Virtual hosts
                • Static asset hosting
                • Caching
                • SSL/Let’s Encrypt
                • Load balancing for upstream servers
                • Route rewriting and redirecting
                • Throttling/blacklisting/whitelisting
                • Websocket stuff

                Like, sure you can do streaming media, weird auth integration, mail, direct database access, and other stuff, but the vast majority of devs are using a default install or some Docker image. But the bread and butter features? Those aren’t going away.

                If the concern is that new goofy features like QUIC or HTTP3 or whatever will only be available under a commercial license…maaaaaybe we should stop encouraging churn in protocols that work well enough?

                It just seems like much ado about nothing to me.

                1. 6

                  maaaaaybe we should stop encouraging churn in protocols that work well enough?

                  They don’t work well enough on mobile networks. In particular, QUIC’s main advantage over TCP is it directly addresses the issues caused by TCP’s congestion-avoidance algorithm on links with rapidly fluctuating capacities. I share your concern that things seem like they’re changing faster than they were before, but it’s not because engineers are bored and have nothing better to do.

                2.  

                  New cool features will only be available in the commercial version, because $$.

                  Isn’t that already the case with nginx?

              1. 16

                When your SSH-ing into a Linux machine, it’s not really using your iPad as Dev machine. It’s using your iPad as a terminal. Slap a battery to a vt220 and you have the same (but way cooler)

                1. 2

                  Many of us spend all day remotely connected to another machine for development anyway. The line between “development machine” and “dumb terminal” might be more blurry than you think.

                  Since I do mostly remote server development, what matters to me on my “development machine” is the keyboard and software locally on the OS I’m running in front of me, not necessarily what is on the remote machine. If we define my AWS server as my “development machine” because that’s where the code is run, I don’t care one bit about the keyboard on my development machine, or the mail client on my development machine, and my development machine doesn’t even have Slack installed. But my “dumb terminal” $2000 Macbook Pro does, and that’s what actually matters.

                  1.  

                    does it matter what text editor, shell, and compiler are installed on your development machine?

                1. 2

                  strace is such a cool and handy tool as a sysadmin. Heaven knows how many times it helped me diagnose a black box application. Even with simple basic filtering to find out where it connects to and what is posts. this seems to be a very comprehensive guide. Cool!

                  1. 6

                    I’m not sure this is a good idea. I find medium.com repulsive, but once we have this feature what other domains will we filter? There’s already calls for imgur.com.

                    While domain filtering might start on sites with bad technical practices, what happens when it extends to sites with bad design, or where the author’s other writing is too controversial? I don’t think that’s a road worth going down.

                    1. 4

                      I agree with this entirely. Going down the route of ‘ban everything’ tends to have people go off and congregate into far left or far right communities. I realize with Medium, it’s not the message but the … (ugh a pun)…medium. Yea it’s a garbage platform, but I don’t think creating user filters for websites/domains is going in the right direction.

                      1. 4

                        This is just my completely unscientific opinion, but I do think certain mediums suggest/encourage/cultivate certain types or qualities of content.

                        This may be confirmation bias, but I perceive a strong correlation between Medium and superficial fluff pieces.

                      2. 4

                        I think the idea is to implement domain hiding, the same way you can currently hide tags you’re disinterested in. I agree that automatic domain filters for the entire site is a very bad idea, but allowing users the ability to more finely curate their feed seems like a good plan to me. I imagine if it’s built the same way you’d be able to get a feed of only a domain if you wanted to.

                        1. 1

                          On Reddit, I use a client that lets me filter subreddits, specific terms and sites. No politics, no BuzzFeed like stuff, no medium and a bunch of subreddits I dislike. Makes my experience wonderful. Using Reddit without my filters is just as awful as using the web without an AdBlocker. But, those filters are personal, just for me. I don’t ask to block it entirely for everyone. Just for my account.

                          1. 3

                            If you’re really just looking to customize your own Lobsters experience, then I think some form of client-side filter is the best way to go.

                            I understand that others might use such a feature on the site, especially if it were convenient, but like @djsumdog and @endgame (IIUC) I do have some concern about the long term effects on the community.

                        1. 15

                          I use Firefox with uBlock Origin (for the ads) and the makemediumreadable.com (for the annoying medium formatting). Firefox also features a Toggle Reader View button (ctrl-alt-R) enabled on websites it detects doing too much text formatting (just like Medium).

                          1. 4

                            I mostly use reader mode. But I specifically ment the submissions here on lobsters. Filter those for me just as I can filter any tag.

                          1. 4

                            I have been pondering writing a gopher output format for hugo, but I haven’t had the spell slots yet. It ought to work basically the same as the RSS output.

                            1. 2

                              My sorting code is exactly the same as the rss code indeed.

                            1. 11

                              It’s getting to the point where lobsters needs a gopher tag, and this is a good thing.

                              1. 2

                                Yes I couldn’t find one so #web it was. @alynpost what is the procedure to get a new tag?

                                1. 2

                                  From the history of posts in the meta tag, it looks like you submit a meta-tagged tag suggestion text story to Lobsters to gauge interest. If the mods think there is enough interest after seeing the responses and upvotes on that thread, they manually edit the list of tags to include it.

                                  1. 5

                                    That is correct. It’s optional, but if you want to also prepare a list of existing stories that you think would benefit from the tag, that’s a great way to make the case.

                              1. 4

                                How would one generate an example a.out file (not the gcc filename, the actual format) in 2019?

                                1. 2

                                  So it looks like this https://i.imgur.com/RCQgpax.png in my gopher client. Which is not ideal.

                                  It seems like basic markdown support - with images - in gopher clients would be a really nice and useful thing. (Although I am not keen on mixing http in, the images could be changed to be local or gopher:// links)

                                  1. 2

                                    Yes it should look like that. Every article on my site has a text only version, which is raw markdown with header and license ( https://raymii.org/s/blog/Site_Improvements_for_accessibility.html ) - which I reuse for the gopher part of the static site generator.

                                    I do plan to add images back in but that requires more logic in the generator. It is not aware of what is in the article, it just does markdown conversion. I have to add logic to parse for images and then link then in the gopher part.

                                    Edit I now see you’ve written your own client. Cool! Lynx (my client) and the Android app do word wrapping automatically. That shouldn’t be to hard to add for me.

                                  1. 8

                                    Don’t worry to much about what stack you’re going to use now. Start with something simple that allows you to write and worry about in depth tech later. Do a WordPress site, Ghost, God forbid Medium, a plain text file, gopher, but just get started. Write, keep that up for a month or two and then check your workflow.

                                    Maybe for your personal brand a simple page with contact details and a resume is enough.

                                    Or, if you like to tinker, go all in with static sites and other tech. But it will probably be more of a tinkering with the stack thing than a writing thing.

                                    (Full disclosure: I started with Joomla in 2006, wrote my own PHP system in 2008) and in 2012 wrote a static site generator. Here is some history: https://raymii.org/s/blog/Site_updates_new_layout_for_overview_pages.html

                                    I do update my generator often and write about it. Latest additional is a text only version of my content and accessibility improvements: https://raymii.org/s/blog/Site_Improvements_for_accessibility.html )

                                    1. 1

                                      Oh men how I would love to find an old hrm system 💯 s of years from now that stores the salary information as 💰💱🤑💵💸💶💷

                                      1. 2

                                        I’ve been collecting introductory gopher tutorials over on https://gopher.zone. I’ll have to contact the author of this one to see if I can pull it in.

                                        1. 1

                                          The author is I think @alynpost, admin here and owner or at least employee of prgmr

                                          1. 1

                                            Thank you @raymii for highlighting me. James I would love to have this article on gopher.zone.

                                            The author of the article is Paul Scott. I’ve previously spoken with him about publishing this article on gopher.zone. He would like to be able to extend and republish it in the future but verbally non-exclusivity was the only issue he raised with you publishing this article. I would like attribution on the article stating where it was originally published.

                                            I’ve sent you an email to the address on your resume restating this and including the relevant parties. I’m glad you’re interested in incorporating this material.

                                            1. 1

                                              The site is on github :)

                                            2. 1

                                              Hi, James! I’m glad you like the article. :)

                                            1. 4

                                              Wow this is a lot of effort for dice comparison. Really cool!

                                              1. 2

                                                Are you really allowed to roll comment 4 times in row? ;)

                                                1. 6

                                                  Nat 20 on their Dex check

                                                  1. 2

                                                    Nope, I accidentally a comment…

                                                  2. 1

                                                    Did you mean to post the same message four times??

                                                  1. 3

                                                    With all the recent keyboard posts I thought it would be cool to discuss other layouts. This one seems interesting, but what is a good layout for programming?

                                                    1. 1

                                                      I use https://www.normanlayout.info on my hardware keyboards (previously an Ergodox and Plank, probably a Levinson or Let’s Split next + for a long time). Norman is pretty similar to workman in history + goals.

                                                      I’ve also heard of “programmer’s layouts”, that swap number keys and punctuation, so by default you get !@#$% and can press shift to get 12345. The wonderful qmk firmware that’s very popular for homebrew keyboards makes this sort of thing very easy. I really appreciate the way one-shot keys and permissive hold work; they’ve nearly eliminated my biggest source of typos (not coming off shift/ctrl/etc fast enough for the next key).

                                                      1. 1

                                                        I use dvorak instead of workman, but TBH basically any non-qwerty layout is going to be so much of an enormous improvement over qwerty that the differences between dvorak, norman, workman, etc is basically a rounding error.

                                                        edit: the programming-specific improvements come more from having a better physical layout than having a better logical layout. for instance, a keyboard which puts ctrl under your thumb instead of your pinky, or having a thumb-based fn key which can let you move brackets to the home row.

                                                      1. 3

                                                        I have an ErgodoxEZ and I can’t believe I haven’t thought to bind the Alt-Tab combo to a single key.

                                                        1. 2

                                                          Same for me, this is going in my layout ASAP. Maybe even Ctrl+v as well

                                                          1. 1

                                                            Glad you like it :)

                                                        1. 3

                                                          This is a nice well written article. Bit long, but well worth the time.

                                                          1. 16

                                                            Advertising, with no prior engagement. :(

                                                            1. 17

                                                              Hi, my apologies, I might have been not used to the rules/culture of this place… Let me apologize if this link submission made you see some unwanted ad spam. I was thinking that the story we posted might have some value as a technical reading, but ultimately you’re right, it serves as an advertisement as well. From now on I’ll be more careful when posting links here and try to separate technical content. Again, I’m sorry for disturbing your pleasant afternoon (although you might be in a different timezone…).

                                                              1. 10

                                                                No worries, and congrats on a product launch. The problem is just that this site would quickly drown in marketing and advertising if people’s first few interactions here were posting their products or services. :(

                                                                1. 6

                                                                  I like the video you have demonstrating the board: https://www.youtube.com/watch?v=th7KZzGz17s -

                                                                  1. 8

                                                                    Thank you… I’m pretty sure that, if I manage to survive another decade, my friends will then share that video to embarrass me… But that was the best I could come up with with the limited budget (The video took $15 to buy a tripod to stabilize the filming). I’m glad that at least one person liked it… 😂

                                                                    1. 7

                                                                      All those friends should envy you since you actually did something instead of being an armchair critic 😉

                                                                2. 11

                                                                  Agreed, but there is interesting technical content as well: https://moonrim.io/compare - although you could call that advertisement as well, but a 10 page advertisement then.

                                                                  Maybe I just like keyboards too much to be annoyed by advertisement that appeals to me. (So ads about cool ergo boards).

                                                                  This should have a buyer beware title, because it’s a crowdfunding and you might not get a product (or three years later like the UHK) and lost your money.

                                                                  1. 4

                                                                    I want to upvote but the thing seems super suspicious. Just at the crowdfunding stage.

                                                                    Are there other, similar keyboards on the market?

                                                                    1. 10

                                                                      Hi. Maker here. I hope the following helps remove some of the suspicion:

                                                                      • Some design ideas of this has already been tried and produced. If it helps, you might want to take a look at ErgoDox, Keyboardio, and DataHand.
                                                                      • We’ve built a prototype and, admittedly, the technological barrier is not high to make this thing if you have some knowledge in electronics and programming. The issue is more of how to gather enough people to make mass production feasible; To make plastic injection molding financially viable, we need at least about one thousand people willing to buy it, hence the fixed funding goal. Speaking of which… The goal is fixed (instead of flexible funding goal) so if it doesn’t reach $200k before the end of the campaign, the funding will be canceled automatically and your payment will be refunded in its entirety.
                                                                      • If you doubt whether I’m a fraud or not, you are totally rightfully so. It seems there are so many crowdfunding scams these days… So, if, by any chance, you are interested in my track record: I’ve worked as a software engineer in South Korea for a while. I’ve been an organizer of Haskell-KR for a while, so my name is not entirely unknown to the Korean programming community. (If you look at the backers list, you’ll see the early backers are mostly Koreans with typical Korean names). My previous workplace was LINE, where I held a programming language boot camp that was featured officially on LINE’s engineering blog. And… If there’s anything else I can do for you to trust us, please never hesitate to tell us.
                                                                      1. 4

                                                                        I love me some split keyboards. I just wrote this article on my five year adventure in split keyboards: https://raymii.org/s/articles/Split_keyboards_a_five_year_review_including_the_ErgoDox_EZ_Matias_Ergo_Pro_and_Kinesis_Freestyle_2.html

                                                                        The fixed goal is nice, that gives people a bit more trust to join in with the funding. I’ve sadly got bad experiences with Indigogo’s where money just vanished without a product. That is, you are not buying a product but supporting a project and maybe getting a perk.

                                                                        I’m absolutely not saying you’re a fraud and I love the project, will probably back it since I do love me a good keyboard.

                                                                        1. 2

                                                                          Ditto wrt indigogo and vanished money. I’d be more inclined to contribute to crowdsuppy, kickstarter, or, alternatively, massdrop, all of which I’ve had great experiences with, but indigogo is a red flag as I see it.

                                                                          1. 2

                                                                            Indeed if you compare Kickstarter and Indiegogo, the former has a higher reputation. We did want to use Kickstarter, but opening a project on Kickstarter demanded permanent residency of one of 26 countries (1). We’re Koreans living in South Korea, so we sadly couldn’t. :(

                                                                            (1)

                                                                            Project creation is currently available to individuals in the US, UK, Canada, Australia, New Zealand, the Netherlands, Denmark, Ireland, Norway, Sweden, Germany, France, Spain, Italy, Austria, Belgium, Switzerland, Luxembourg, Hong Kong, Singapore, Mexico, and Japan who meet the requirements below.

                                                                            https://help.kickstarter.com/hc/en-us/articles/115005128594-Who-can-use-Kickstarter-

                                                                            1. 2

                                                                              I was sold the second I saw this keyboard. I’m not thrilled about indigogo, but I see what you’re saying regarding kickstarter and you have my support. I hope to see moonrim II get fully backed. Good luck!

                                                                            2. 1

                                                                              FWIW, there have been some pretty successful projects on IGG, like the ErgoDox EZ. Of the 5 projects I backed there, three already delivered, a the fourth is on track to deliver too. The only project that vanished with my money on IGG was the Jolla Tablet.

                                                                              1. 1

                                                                                I completely forgot about the Ergodox Ez - as a long time user of the classic ergodox (massdrop kit) I backed the EZ on indigogo well and have never regretted it.

                                                                          2. 3

                                                                            We’ve built a prototype and, admittedly, the technological barrier is not high to make this thing if you have some knowledge in electronics and programming. The issue is more of how to gather enough people to make mass production feasible.

                                                                            I appreciate your candor on this point, and overall in the campaign description and demonstration video.

                                                                            I’ve been considering alternative keyboards for a couple of years now, and thought about using my 3D printer to build a Dactyl keyboard, which is also a concave columnar layout, but did not find the time. One thing I missed was an integrated pointing device: I thought about adding one, then contemplated all the changes I would have to do for it, and decided to leave it for later.

                                                                            Having you deal with all that is well worth the crowdfunding price for me, and I just backed it.

                                                                            1. 2

                                                                              Thank you very much 😂 We really want to deliver a quality product to you. As this is a fixed funding goal and it gets canceled if it doesn’t reach the goal, we desperately need to spread the word to gather about 1,000 people. If there’s any chance anyone around you might also be interested, please tell them. Again, thank you so much for backing Moonrim II.

                                                                            2. 1

                                                                              The only thing that sticks out is the price. It is oddly low. :)

                                                                              In any case: good luck on this mission! I love the idea, and yes, I’ve heard of those keyboards. Yours doesn’t look anything like those, but like a kinesis advantage pro that is domed.

                                                                            3. 1

                                                                              You could buy an ergodox and glue / Velcro it to a bookshelf stand (bookend)? or two planks at an angle (reverse T)

                                                                          1. 1

                                                                            We have an agile coach to help us transition. That works great since there is management buy in as well.

                                                                            1. 2

                                                                              This reads like an ad for tilt. Not sure what it does after reading this article and it seems those things it mentions that are bad could be automated (think ansible, shell, Capistrano etc).