Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:99988
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.83.46 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CACXBjuhef8nvOrL+L9m9jAtxDAMn3fo0VfFDYoi+pr6eg8Ys4w@mail.gmail.com>
References: <CA+aNembkpeU+vTX0dr1r_NuPZkKu4Da2rMTbS3RWk2eSacF_KA@mail.gmail.com>
 <CAESVnVrCndhLSuxZzNp5xqQLp8SC0wGSDAq8cjH+fRew-cCf1g@mail.gmail.com>
 <CANUQDCjB9UY8jTmmp43bQAW_9xJnoMbREN1zOQh1LubTfO4C-w@mail.gmail.com>
 <CACXBjuiL_=-qy53BWbB31_t_XJXqBguwVToS9bV=2K2np+zaRA@mail.gmail.com>
 <CANUQDCjPwMUXjkn2LB7oZsY8ifwBAFjdaQpR6kzt9usSMnQjXw@mail.gmail.com> <CACXBjuhef8nvOrL+L9m9jAtxDAMn3fo0VfFDYoi+pr6eg8Ys4w@mail.gmail.com>
Date: Fri, 21 Jul 2017 10:31:56 +0200
Message-ID: <CA+aNemarv_h2zXxGXe+K-oXBK0zBNEYSfPZ_P4ukqs1nPB+VaA@mail.gmail.com>
To: Rasmus Lerdorf <rasmus@lerdorf.com>
Cc: Niklas Keller <me@kelunik.com>, Sara Golemon <pollita@php.net>, 
	"internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="94eb2c031540beae8c0554cfb2e9"
Subject: Re: [PHP-DEV] php.net website
From: mathiasgrimm@gmail.com (Mathias Grimm)

--94eb2c031540beae8c0554cfb2e9
Content-Type: text/plain; charset="UTF-8"

If php is mainly static it could be almost fully cached in a CDN.
For the downloads I don't think the latency would be a problem but that can
also be in the CDN
If php owned two servers in US and two in Europe and possibly 2 in Asia we
would be goon in terms of latency for the search IMO.




On 20 July 2017 at 19:38, Rasmus Lerdorf <rasmus@lerdorf.com> wrote:

> On Thu, Jul 20, 2017 at 1:42 AM, Niklas Keller <me@kelunik.com> wrote:
>>
>> They can also just request them themselves, but only for their mirror
>> domain. If you allow them to issue for www.php.net, you can as well just
>> put the current private key there.
>>
>
> I think there is a big difference between putting the private key there
> and proxying validation for just a www.php.net CN alias. We already have
> a list of known mirrors, so we would make sure to only validate
> www.php.net for those. By validating www.php.net we allow any mirror to
> pretend they are www.php.net and no other *.php.net domain, which is
> exactly what we want.
>
> -Rasmus
>

--94eb2c031540beae8c0554cfb2e9--