Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HTTPS Best Practices Section #253

Open
bengreeley opened this issue Aug 30, 2018 · 2 comments
Open

HTTPS Best Practices Section #253

bengreeley opened this issue Aug 30, 2018 · 2 comments

Comments

@bengreeley
Copy link
Contributor

I created a PR to add HTTPS to the systems best practices page. Since internally we strive for all of our sites to be HTTPS, it makes sense that this should be added to our best practice documents. There's much more information that could be added here, but my initial goals were

  1. To have HTTPS be included in the best practices to point engineers to the appropriate section with an explanation of why it's considered a best practice
  2. To talk about some best practices when implementing HTTPS.

https://github.com/10up/Engineering-Best-Practices/tree/feature/https

The addition of this section also could introduce the opportunity to highlight the following:

  • Best practices from a systems perspective when implementing HTTPS (if any). We touch on this in an earlier section on NGINX, so it may be a bit redundant. @tott @TheLastCicada curious of your thoughts here.
  • It would be great to link to a 10up plugin for checking insecure content. I know our Insecure Content Warning plugin is currently private, but this would be a great opportunity to add that as a best practice.
@tlovett1
Copy link
Member

tlovett1 commented Oct 5, 2018

@bengreeley can you open the PR?

@bengreeley
Copy link
Contributor Author

@tlovett1 You've got it: #264

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants