Showing posts with label HTTPS. Show all posts
Showing posts with label HTTPS. Show all posts

Thursday, July 10, 2014

SPDY, an experiemental web protocol to speed up HTTP

Page loading and latency are two of the important parameters in web traffic. If your page does not load under something like 4 sec, the surfer will go elsewhere. SPDY is all about reducing the page loading and improving latency. SPDY is a Google trade mark and it is still in experimentation.

Read this White paper to get a feeling for what is brewing:
http://dev.chromium.org/spdy/spdy-whitepaper

SPDY modifies the HTTP rather than replacing it and functions at the Session level. It functions as a tunnel for HTTP and HTTPs requests. HTTP 2.0 which in the works takes SPDY as a starting point.


Source: white paper

Basic Features(Google white Paper)
  • Multiplexed Streams
  • Request prioritization
  • HTTP Header compression
Google will try to get it standardized (in the works) and implementations exist for Chromium, Mozilla Firefox, Opera and other browsers including IE.

How is the speed achieved?
Latency reduction is acheived through compression, mulitplexing and prioritization (Basic features). The multiplexing is carried over one client connection for subweb resources instead of HTTP fetching one resource per connection.

Well how does HTTP with SPDY compares with HTTP?

Well web pages are complex constructs with images; style sheets; media etc fetched through connections slow and fast. It appears SDPY would work faster than HTTP in most cases.
Here is the performance comparison table from Google whitepaper:



Microsoft is also looking at SPDY and here is link to Microsoft research on comparing HTTP with SPDY and HTTP:

http://research.microsoft.com/pubs/170059/A%20comparison%20of%20SPDY%20and%20HTTP%20performance.pdf

Here is a performance chart for a popular web site (from Microsoft's PDF above):


Well we want to surf faster and with our Smartphones to get the same experience like the one on desktop something has to change.

Monday, May 05, 2014

Take care of HeartBleed bug, stop the flow

Heartbleed bug works on the vulnerabilities (missing bounds check in handling of the TLS heartbeat extension) in the popular OpenSSL crysptographic library. When the server is infected it can steal typically 64 chunks of information from HTTPS sites. SSL/TSL encryption data secures the information between you and your server for whatever application, be it be web, email, instant messaging and VPNs. Once stolen it can impersonate users to do further damage.

There has been a fix. Affected servers should upgrade their servers to 1.0.1g version. Most of them are trying to implement the fix and some seems to have already done it.

Testing in Filippo's online test site (next link in the post) the following institutions seems to have fixed the issue. You may feel safer if you are using these services. However double check with your institution.
https://filippo.io/Heartbleed/#www.Paypal.com:443

PayPal
Bank Of America
Bank Of Hawaii
Bethpage Federal Credit Union
T D Ameritrade
E*TRADE
draft.Blogger.com
Fidelity.com Login

For example PNC Bank at the time of this post does not give a 'clear' signal and other forces may be at work. Check it out on the FAQ page for Filippo's site here.

 

Monday, March 03, 2014

Publishing to a Web site from VS 2013 is easy

Microsoft Visual Studio 2013 Express for Web (which is free) can be used to create a new web site application and pulish to a web site.

The steps are easy to follow and shown here:

Step 1. Launch VS 2013 Express for Web.

Step 2: Click from File -->New Website

Step3: Create a ASP.NET Web Forms application in File System . This will be using ASP.NET 4.5 SP1

Step 4: Right click Web application to display the following














Step 5: Click Publish Web site. You need to create a Profile


 

Step 6: Click the handle for import (not the ellipsis button)

Step 7: In the drop-down click <New Profile...> and provide a name. Click Publish.

The Publish Web page is displayed. VS 2013 Express for Web publishes using the Web Deploy method by default.

Step 8: Provide the information and you are all set.

Visual Studio 2013 Express for Web might also have a problem as it fails to open an existing web site.




Sunday, March 02, 2014

FileZilla is a nice FTP program

In the last post I described moving an ASP.NET website contents from one hosting provider to another. What if you want to temporarily download your web site content to a folder on your computer? The answer for this is to use a FTP program that is easy to use and freely available.

FileZilla is a free FTP solution which provides both an FTP Client (allowing downloading your site content) and FTP server (you can upload files to a site) and is supported by a forum and its users.
You can download FileZilla from here:



https://filezilla-project.org/

For using FileZilla to move web site contents to file/folder system follow this link:
http://hodentekhelp.blogspot.com/2014/03/what-is-filezilla-and-how-do-you-use-it.html

DMCA.com Protection Status