Paul's Journal

IEBlog: Extended Validation Guidelines v1 Released!

Translation: bullshit, bullshit, more bullshit, phishing, money, more bullshit; summary: pay more money for bullshit.

See Also:

• Study Finds IE7 + EV SSL Won’t Stop Phishing
• Wikipedia: Extended_Validation_Certificate

Now in httpd trunk r545379:

Add support for distributed caching of SSL Sessions inside memcached, using apr_memcache, which is present in APR-Util 1.3/trunk.

Configure it like this:

SSLSessionCache memcache:10.0.0.1,10.0.0.2,10.0.0.3

I originally wrote the patch for this back in 2005 at ApacheCon US. Never had time to clean it up and test it… But now we needed it for work.

As with anything using memcache, there is no authentication — so only use this if your memcache nodes are on a trusted network — because this could let someone hijack an SSL Session, and that could be bad.

Remember mod_images_never_expire?

Well Today I wrote mod_never_expire . Its pretty much the same idea, but its a little more configurable, and for files it sets long expire and cache-control headers…. And it works in httpd 2.x

To use, you just use any Directory/Location/Files container, and tur it on:

  <LocationMatch ^/c/css/r\d+/.+\.css>
    NeverExpire on
  </LocationMatch>

or:

  <Directory "/foo/bar/js/">
    NeverExpire on
  </Directory>

Great for Images, CSS, and Javascript, as long as you properly version your URLs.