HPKP report-uri and nginx ssl_verify_client

2016-10-30 Thread Marcus Schopen
Hi, on a host I'd like to send HPKP reports to ssl_verify_client is set to "optional": ssl_client_certificate /etc/nginx/ssl/CA.pem; ssl_verify_client optional; If HPKP policy fails (for another domain), Chrome (54.0.2840.71 (64-bit)) sends HPKP reports to that reporting host, but the post

Re: Pre-compressed (gzip) HTML using fastcgi_cache?

2016-10-30 Thread Lucas Rolff
Well - then put fastcgi_ignore_headers Vary, make your map determine if the client support gzip or not, then you'll have 2 entries of everything, 1 gzipped and one not gzipped. I'm not sure how much traffic we're talking about when it's about 'high traffic' - you'd probably want to run your

Re: Pre-compressed (gzip) HTML using fastcgi_cache?

2016-10-30 Thread seo010
Hi! It sounds like a good solution to improve the performance, however, I just read the following post by Jake Archibald (Google Chrome developer). "Yeah, ~10% of BBC visitors don’t support gzip compression. It was higher during the day (15-20%) but lower in the evenings and weekends (<10%).

Re: Pre-compressed (gzip) HTML using fastcgi_cache?

2016-10-30 Thread Lucas Rolff
What you could do (I basically asked the same question 1 week ago), is that whenever you fastcgi_pass then enforce accept-encoding: gzip - meaning you'll always request gzipped content from your backend - then you can enable the gunzip directive by using "gunzip on;" This means in case a

Re: Pre-compressed (gzip) HTML using fastcgi_cache?

2016-10-30 Thread seo010
Hi *B. R.*! Thanks a lot for the reply and information! The KEY however, does not contain different data from http_accept_encoding. When viewing the contents of the cache file it contains the exact same KEY for both MD5 hashes. Also, it does not matter what browser is used for the first request.