Recent Comments
- s25g5d4 on Mozilla 的提案「HTTP Immutable Responses」
- EC2 與 EBS 十月開始以秒計費 | Gea-Suan Lin's BLOG on AWS CodeDeploy 支援 BlueGreenDeployment
- Google Chrome 將 .dev 設為 HSTS Preload 名單 | Gea-Suan Lin's BLOG on 在 Google Chrome 連上因 HSTS 而無法連線的網站
- Isaac Kwan on Google Chrome 對 Symantec 全系列憑證的不信任計畫
- Matt Mullenweg 決定對 React 的專利議題投下反對票 | Gea-Suan Lin's BLOG on React 的專利授權議題
Archives
- September 2017 (36)
- August 2017 (37)
- July 2017 (41)
- June 2017 (37)
- May 2017 (59)
- April 2017 (55)
- March 2017 (55)
- February 2017 (35)
- January 2017 (42)
- December 2016 (48)
- November 2016 (32)
- October 2016 (35)
- September 2016 (78)
- August 2016 (69)
- July 2016 (19)
- June 2016 (42)
- May 2016 (61)
- April 2016 (51)
- March 2016 (74)
- February 2016 (87)
- January 2016 (31)
- December 2015 (36)
- November 2015 (61)
- October 2015 (72)
- September 2015 (53)
- August 2015 (42)
- July 2015 (38)
- June 2015 (30)
- May 2015 (18)
- April 2015 (57)
- March 2015 (41)
- February 2015 (50)
- January 2015 (35)
- December 2014 (50)
- November 2014 (56)
- October 2014 (41)
- September 2014 (37)
- August 2014 (37)
- July 2014 (28)
- June 2014 (50)
- May 2014 (32)
- April 2014 (46)
- March 2014 (38)
- February 2014 (29)
- January 2014 (52)
- December 2013 (50)
- November 2013 (45)
- October 2013 (40)
- September 2013 (48)
- August 2013 (22)
- July 2013 (25)
- June 2013 (13)
- May 2013 (16)
- April 2013 (28)
- March 2013 (37)
- February 2013 (36)
- January 2013 (57)
- December 2012 (44)
- November 2012 (10)
- October 2012 (12)
- September 2012 (21)
- August 2012 (21)
- July 2012 (25)
- June 2012 (8)
- May 2012 (10)
- April 2012 (11)
- March 2012 (10)
- February 2012 (11)
- January 2012 (5)
- December 2011 (13)
- November 2011 (12)
- October 2011 (10)
- September 2011 (7)
- August 2011 (5)
- July 2011 (11)
- June 2011 (21)
- May 2011 (22)
- April 2011 (36)
- March 2011 (43)
- February 2011 (23)
- January 2011 (24)
- December 2010 (34)
- November 2010 (19)
- October 2010 (16)
- September 2010 (15)
- August 2010 (10)
- July 2010 (12)
- June 2010 (3)
- May 2010 (3)
- April 2010 (4)
- March 2010 (8)
- February 2010 (14)
- January 2010 (13)
- December 2009 (16)
- November 2009 (28)
- October 2009 (24)
- September 2009 (12)
- August 2009 (7)
- July 2009 (10)
- June 2009 (11)
- May 2009 (22)
- April 2009 (21)
- March 2009 (18)
- February 2009 (7)
- January 2009 (32)
- December 2008 (19)
- November 2008 (12)
- October 2008 (15)
- September 2008 (14)
- August 2008 (15)
- July 2008 (18)
- June 2008 (20)
- May 2008 (19)
- April 2008 (27)
- March 2008 (22)
- February 2008 (21)
- January 2008 (15)
- December 2007 (22)
- November 2007 (17)
- October 2007 (29)
- September 2007 (31)
- August 2007 (34)
- July 2007 (31)
- June 2007 (36)
- May 2007 (23)
- April 2007 (22)
- March 2007 (30)
- February 2007 (50)
- January 2007 (75)
- December 2006 (48)
- November 2006 (59)
- October 2006 (89)
- September 2006 (29)
- August 2006 (48)
- July 2006 (14)
- June 2006 (35)
- May 2006 (62)
- April 2006 (63)
- March 2006 (72)
- February 2006 (83)
- January 2006 (56)
- December 2005 (46)
- November 2005 (60)
- October 2005 (27)
- September 2005 (54)
- August 2005 (83)
Tags
Categories
- Anime (29)
- AWS (439)
- BBS (22)
- Blog (250)
- Book (31)
- Bridge (1)
- Browser (530)
- Cassandra (2)
- CDN (186)
- Cloud (587)
- CMS (58)
- Comic (19)
- Computer (4,507)
- Computer and Network Center (33)
- CSS (71)
- Database (423)
- DNS (132)
- Editor (26)
- Financial (89)
- Firefox (233)
- Food (14)
- FreeBSD (139)
- FTP (3)
- Game (63)
- GCP (8)
- Go (2)
- GoogleChrome (168)
- Hardware (386)
- IE (98)
- Joke (159)
- Lab (4)
- Library (7)
- Linux (175)
- MacOS (31)
- Mail (120)
- MariaDB (19)
- Movie (35)
- Murmuring (4,648)
- Music (49)
- MySQL (297)
- NCTU (65)
- NetBSD (7)
- Network (3,289)
- OpenBSD (8)
- Opera (26)
- OS (392)
- P2P (132)
- Photo (72)
- Political (124)
- PostgreSQL (41)
- Privacy (12)
- Programming (783)
- Recreation (536)
- RSS (79)
- Safari (38)
- Science (102)
- Search Engine (181)
- Security (1,061)
- Service (63)
- SMS (10)
- Social (220)
- Software (2,378)
- Spam (108)
- Sport (10)
- Telephone (118)
- Television (62)
- Usenet (15)
- Vim (14)
- VPN (19)
- Wiki (48)
- Windows (74)
- WWW (1,638)
Blogroll
Meta
Tag Archives: mozilla
Mozilla 的提案「HTTP Immutable Responses」
狀態已經是 Category: Standards Track 了，RFC 8246 的「HTTP Immutable Responses」： The immutable HTTP response Cache-Control extension allows servers to identify resources that will not be updated during their freshness lifetime. This ensures that a client never needs to revalidate a cached … Continue reading
Firefox Nightly 的 Stylo
Firefox 的 Nightly 納入 Stylo 了，一個用 Rust 開發的套件，可以將 Servo 的 CSS style system 整進 Gecko 內：「Stylo is ready for community testing on Nightly!」。 Stylo (a.k.a. Quantum CSS) will integrate Servo's CSS style system into Gecko, such that the style system … Continue reading
Alexa Top 1M 網站使用 HTTPS 的改善
Mozilla 觀測 Alexa Top 1M 網站，對 HTTPS 使用情況的分析：「Analysis of the Alexa Top 1M sites」。 可以看到比較明顯的是 HTTPS 以及 HTTP → HTTPS Redirection 這兩塊： 不過用 Alexa 的資料有種怪怪的感覺啊... 在討論 HTTPS (有點在推廣的感覺)，但 Alexa 的網站現在是做反過來的 HTTPS → HTTP Redirection XDDD
利用 Unicode Domain 釣魚，以及 Chrome 與 Firefox 的解法
一個多禮拜前引起蠻多討論的一篇文章，利用 Unicode Domain 釣魚的方法：「Phishing with Unicode Domains」。 由於這是幾乎完美的攻擊，所以被提出來後 (Security: Whole-script confusable domain label spoofing) 有不少討論： This bug was reported to Chrome and Firefox on January 20, 2017 and was fixed in the Chrome trunk on March 24. The fix is … Continue reading
在 Ubuntu 上跑 Selenium (Google Chrome 與 Firefox)
最近可能會用到，所以開了一台 EC2 instance 跑 Ubuntu 16.04 測試 Selenium。拿 Chrome 與 Firefox，Linux 平台上兩個主要的瀏覽器。 要讓他動還蠻簡單的，只是不知道真的用下去後，後面會遇到多少地雷 XDDD 基本上是按照「Installing Selenium and ChromeDriver on Ubuntu」這篇文章的方法安裝，有幾點可以注意一下： ChromeDriver 可以翻一下最新版，文件上寫的是 2.26，但現在最新的是 2.27 (寫這篇時)。 雖然寫「(Optional) Create and enter a virtual environment」表示可以不做，但不做其實不會動 (看錯誤訊息像是要建立目錄時權限不夠)，所以乖乖的用 virtual environment 裝在自己目錄下吧 XDDD 同理，Firefox 用 APT … Continue reading
Firefox 下一個版本 (52) 將預設關閉 SHA-1 支援
順著 SHA-1 正式被打穿，Mozilla 也正式宣佈從下一個版本的 Firefox 將完全關閉 SHA-1 支援 (看敘述應該還是可以透過 about:config 開)：「The end of SHA-1 on the Public Web」。 As announced last fall, we’ve been disabling SHA-1 for increasing numbers of Firefox users since the release of Firefox 51 using a … Continue reading
Facebook 與 Google Chrome 以及 Firefox 的人合作降低 Reload 使用的資源
Facebook 花了不少時間對付 reload 這件事情：「This browser tweak saved 60% of requests to Facebook」。 Facebook 的人發現有大量對靜態資源的 request 都是 304 (not modified) 回應： In 2014 we found that 60% of requests for static resources resulted in a 304. Since content addressed URLs never … Continue reading
下個版本 Firefox 的 Multi-Process 將預設全面開啟
Mozilla 說明了 Multi-Process 最近的一些進度：「Update on Multi-Process Firefox」。 就目前測試的資料看起來，速度大幅提昇： Those users have been enjoying the 400% increase in responsiveness and a 700% improvement when web pages are loading. 現在的 Firefox 是 50 版，目前的情況是當 extension 標成 multi-process compatible 就會啟用： With Firefox 49 … Continue reading
Mozilla 也在考慮對 Certificate Transparency 的掌握度
由於 Firefox 要支援 Certificate Transparency 的緣故，在「Mozilla CT Policy」這邊 Mozilla 在討論要建立自己的 CT policy 以及自己的架構： CT is coming to Firefox. As part of that, Mozilla needs to have a set of CT policies surrounding how that will work. Like our root inclusion … Continue reading
Mozilla 對 WoSign + StartCom 的正式處分
Mozilla 對 WoSign + StartCom 的不信任處分出爐了：「Distrusting New WoSign and StartCom Certificates」，最後處分的內容跟之前的討論差不多 (參考先前寫的「Mozilla 對於 WoSign + StartCom 根憑證的新發展：拔除」)。 Mozilla 台灣有放出中文版的說明 (差不多就是英文翻譯的版本)：「取消對 WoSign 與 StartCom 新簽發憑證的信任」。 這次比較麻煩的地方在於要信任已經發出的 certificate，而且量太大無法窮舉。所以必須改增加程式碼處理，而這個方法無法對使用 Mozilla CA Certificate Store 的人生效 (因為這包套件只是一堆 pem 檔案，沒辦法放特殊的邏輯進去...) 另外現在 Firefox 是 49 版，要到 51 … Continue reading