{"action":"created","issue":{"url":"https://api.github.com/repos/rhymix/rhymix/issues/706","repository_url":"https://api.github.com/repos/rhymix/rhymix","labels_url":"https://api.github.com/repos/rhymix/rhymix/issues/706/labels{/name}","comments_url":"https://api.github.com/repos/rhymix/rhymix/issues/706/comments","events_url":"https://api.github.com/repos/rhymix/rhymix/issues/706/events","html_url":"https://github.com/rhymix/rhymix/issues/706","id":207049514,"number":706,"title":"SSL 사용 설정 중 '선택적 사용'을 없애는 것에 대한 의견","user":{"login":"misol","id":3437916,"avatar_url":"https://avatars.githubusercontent.com/u/3437916?v=3","gravatar_id":"","url":"https://api.github.com/users/misol","html_url":"https://github.com/misol","followers_url":"https://api.github.com/users/misol/followers","following_url":"https://api.github.com/users/misol/following{/other_user}","gists_url":"https://api.github.com/users/misol/gists{/gist_id}","starred_url":"https://api.github.com/users/misol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/misol/subscriptions","organizations_url":"https://api.github.com/users/misol/orgs","repos_url":"https://api.github.com/users/misol/repos","events_url":"https://api.github.com/users/misol/events{/privacy}","received_events_url":"https://api.github.com/users/misol/received_events","type":"User","site_admin":false},"labels":[{"id":309679395,"url":"https://api.github.com/repos/rhymix/rhymix/labels/discussion","name":"discussion","color":"0e8a16","default":false}],"state":"open","locked":false,"assignee":{"login":"misol","id":3437916,"avatar_url":"https://avatars.githubusercontent.com/u/3437916?v=3","gravatar_id":"","url":"https://api.github.com/users/misol","html_url":"https://github.com/misol","followers_url":"https://api.github.com/users/misol/followers","following_url":"https://api.github.com/users/misol/following{/other_user}","gists_url":"https://api.github.com/users/misol/gists{/gist_id}","starred_url":"https://api.github.com/users/misol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/misol/subscriptions","organizations_url":"https://api.github.com/users/misol/orgs","repos_url":"https://api.github.com/users/misol/repos","events_url":"https://api.github.com/users/misol/events{/privacy}","received_events_url":"https://api.github.com/users/misol/received_events","type":"User","site_admin":false},"assignees":[{"login":"misol","id":3437916,"avatar_url":"https://avatars.githubusercontent.com/u/3437916?v=3","gravatar_id":"","url":"https://api.github.com/users/misol","html_url":"https://github.com/misol","followers_url":"https://api.github.com/users/misol/followers","following_url":"https://api.github.com/users/misol/following{/other_user}","gists_url":"https://api.github.com/users/misol/gists{/gist_id}","starred_url":"https://api.github.com/users/misol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/misol/subscriptions","organizations_url":"https://api.github.com/users/misol/orgs","repos_url":"https://api.github.com/users/misol/repos","events_url":"https://api.github.com/users/misol/events{/privacy}","received_events_url":"https://api.github.com/users/misol/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/rhymix/rhymix/milestones/7","html_url":"https://github.com/rhymix/rhymix/milestone/7","labels_url":"https://api.github.com/repos/rhymix/rhymix/milestones/7/labels","id":2196952,"number":7,"title":"2017-Q3","description":"2017년 3분기","creator":{"login":"kijin","id":164058,"avatar_url":"https://avatars.githubusercontent.com/u/164058?v=3","gravatar_id":"","url":"https://api.github.com/users/kijin","html_url":"https://github.com/kijin","followers_url":"https://api.github.com/users/kijin/followers","following_url":"https://api.github.com/users/kijin/following{/other_user}","gists_url":"https://api.github.com/users/kijin/gists{/gist_id}","starred_url":"https://api.github.com/users/kijin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kijin/subscriptions","organizations_url":"https://api.github.com/users/kijin/orgs","repos_url":"https://api.github.com/users/kijin/repos","events_url":"https://api.github.com/users/kijin/events{/privacy}","received_events_url":"https://api.github.com/users/kijin/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":0,"state":"open","created_at":"2016-12-14T16:53:39Z","updated_at":"2017-02-12T13:16:44Z","due_on":"2017-09-30T07:00:00Z","closed_at":null},"comments":5,"created_at":"2017-02-12T13:16:44Z","updated_at":"2017-02-12T15:04:53Z","closed_at":null,"body":"# SSL 선택적 사용에 대한 의견을 제시합니다.\r\n라이믹스에는 SSL 선택적 사용이라는 선택 메뉴가 존재합니다.\r\nXE 시절부터 생각하면 XE 의 SSL 설정은 가장 처음 '선택적 사용'에서 시작했습니다. 그 당시만 해도 '항상 사용' 옵션은 존재하지 않았습니다. 그게 2008 년이었고, 이제 거의 10년이 다 되어 갑니다. 시대가 변해서 사이트 전체에 SSL 을 적용하지 않으면 로그인 페이지가 존재할 경우 로그인 정보가 탈취될 가능성이 존재한다는 경고가 일상적이 되었습니다. 최근 파이어폭스나 크롬의 업데이트가 이를 드러나고 있다고 생각합니다. 따라서 보안면에서도 사이트 전체에 SSL 을 적용하는 것이 취지에 더 맞는 방향입니다.\r\n'선택적 SSL' 을 위해서 라이믹스는 SSL 이 꼭 필요한 액션을 취합하고 이 액션들은 SSL 로 주소를 반환하도록 별도의 프로세스를 가지고 있습니다. 따라서 선택적 SSL 을 사용하게 되면 사이트 전체를 SSL 로 다루었을 때 보다 PHP 프로그램 (라이믹스)에서 계산하고 확인해야 할 과정도 복잡합니다.\r\nSSL 을 적용하면 클라이언트나 서버의 자원을 많이 사용할 것이라는 것은 미신입니다. MaxCDN 자료에 따르면 (https://www.maxcdn.com/blog/ssl-performance-myth/) 2012년판 맥북 에어를 이용하더라도 SSL 을 이용하는데 6.1 밀리초가 추가로 필요할 뿐이라고 합니다. 피크 CPU 사용률도 2% 증가했을 뿐이라고 합니다.\r\nHTTP2 등 다양한 이슈가 있지만, 더 설명이 필요한가 하는 생각도 듭니다. 일단 제안을 올려봅니다.\r\n저의 제안은 'SSL 선택적 사용' 선택지를 'SSL 모두 사용' 으로 마이그레이션 하는 것입니다. (선택되어 있더라도 SSL 모두 사용으로 해석)"},"comment":{"url":"https://api.github.com/repos/rhymix/rhymix/issues/comments/279224313","html_url":"https://github.com/rhymix/rhymix/issues/706#issuecomment-279224313","issue_url":"https://api.github.com/repos/rhymix/rhymix/issues/706","id":279224313,"user":{"login":"misol","id":3437916,"avatar_url":"https://avatars.githubusercontent.com/u/3437916?v=3","gravatar_id":"","url":"https://api.github.com/users/misol","html_url":"https://github.com/misol","followers_url":"https://api.github.com/users/misol/followers","following_url":"https://api.github.com/users/misol/following{/other_user}","gists_url":"https://api.github.com/users/misol/gists{/gist_id}","starred_url":"https://api.github.com/users/misol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/misol/subscriptions","organizations_url":"https://api.github.com/users/misol/orgs","repos_url":"https://api.github.com/users/misol/repos","events_url":"https://api.github.com/users/misol/events{/privacy}","received_events_url":"https://api.github.com/users/misol/received_events","type":"User","site_admin":false},"created_at":"2017-02-12T15:04:53Z","updated_at":"2017-02-12T15:04:53Z","body":"개인정보보호법 위반으로 다 문의를 넣어봐야겠어요."}}
{"actor":{"display_login":"misol"}}