On heroku, is there absolutely no way to redirect an https naked domain on heroku to it’s non naked domain with wwws?

The best idea we have found so far is to setup two Amazon EC2 micro machine instances with a small bit of nginx configuration. Then, provision two elastic IP addresses to point to those EC2 instances and point 2 A records to those IP addresses. This way, if something goes wrong on the hardware, you … Read more

What exactly is the git:// protocol?

The git protocol is a special daemon that comes packaged with Git; it listens on a dedicated port (9418) that provides a service similar to the SSH protocol, but with absolutely no authentication. It was introduced at the very beginning of Git, in commit 2386d65 (July 2005, Git 0.99.1) Add first cut at “git protocol” … Read more

HTTPS from a console application?

Create and install a root authority and HTTPS certificate Open command prompt as Administrator: Create folder C:\Certs and navigate to it. #Root Authority makecert.exe -r -pe -n “CN=My Root Authority” -ss CA -sr LocalMachine -a sha1 -sky signature -cy authority -sv CA.pvk CA.cer #Certificate makecert.exe -pe -n “CN=localhost” -a sha1 -sky exchange -eku 1.3.6.1.5.5.7.3.1 -ic … Read more

Using SSL Across Entire Site [closed]

It is highly recommended these days to run the entire site on TLS (https that is) if possible. The overhead concern is a thing of the past, it is no longer an issue with the newer TLS protocols, because it is now maintaining sessions, and even caching them for reuse if the client drops the … Read more

C# – Connection: keep-alive Header is Not Being Sent During HttpWebRequest

I’ve had the same issue: The Connection: Keep-Alive header is not sent except the first request, and the server I accessed won’t give me the correct response if it is missing. So, here are my workarounds to this issue: First is set the ProtocolVersion property of HttpWebRequest instance to HttpVersion.Version10. Except the http command will … Read more

Should clients get OAuth 2 access tokens using GET or POST?

The most common argument is that you should not put sensitive information in a query string (GET parameter) as Web servers typically log the HTTP request URL. POST data can be arbitrarily long, so is not usually logged. Therefore when you’re dealing with something like client_secret or code (although it’s one time use), it makes … Read more