[Freedombox-discuss] some thoughts on URI namespaces

[Ingo Stock]

Hi,

on 28/12/14 22:45, Markus Sabadello wrote:
> One pattern I have been experimenting with is creating subdomains for
> each new application which has a web interface.
> I think this is more reliable than using folders, since some
> applications may assume they are installed at the root /.

The problem with subdomains used together with self assigned
ssl-certificates is, that the browser will request the user to add a
security exception for every subdomain, even with a wildcard
certificate. This behavior is completely on the client side. Else the
user would have to install her personal CA in the browser.

Using directories is indeed less reliable, but possibly the better way
in regard to user experience. For software assuming to run in the root
directory, the code has to be rewritten on-the-fly by the webserver,
which is quite dirty.

atb, ingo

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/freedombox-discuss/attachments/20141229/c7add2db/attachment.sig>