Chrome to force .dev domains to HTTPS via preloaded HSTS
Well, I guess it’s time to change all my locally-hosted sites from .dev domains to .test. Thanks, Google.
Tags: https
39
Yes, That Web Project Should Be a PWA · An A List Apart Article
A fantastic piece by Aaron who—once again—articulates what I’ve been thinking:
Your site—every site—should be a PWA.
He clearly explains the building blocks of progressive web apps—HTTPS, a manifest file, and a service worker—before describing different scenarios for different kinds of sites:
- Informational
- Periodical
- Transactional
- Social
- Software
- Institutional
Progressive Web Apps may seem overly technical or beyond the needs of your project, but they’re really not. They’re just a shorthand for quality web experiences—experiences that can absolutely make a difference in our users’ lives.
Highly recommended!
Introducing PWAs
The slides from Calum’s presentation about progressive web apps. There are links throughout to some handy resources.
How to turn your website into a PWA | Max Böck - Frontend Web Developer
This primer on progressive web apps starts by dispelling some myths:
- Your thing does not have to be an “Application” to be a PWA.
- Your thing does not have to be a Javascript-powered single page app.
- PWAs are not specifically made for Google or Android.
- PWAs are ready and safe to use today.
Then it describes the three-step programme for turning your thing into a progressive web app:
- The Manifest.
- Go HTTPS.
- The Service Worker.
Your Site—Any Site—Should be a PWA | Aaron Gustafson
Tell it, brother!
PWAs don’t require you use a particular JavaScript framework or any JavaScript framework at all. You don’t need to be building a Single Page App either.
ngrok - secure introspectable tunnels to localhost
This looks like a useful tool, not just for testing locally-hosted sites (say, at a device lab), but also for making locally-hosted sites run on HTTPS so you can test service workers.
Amber Wilson: HTTPS Poem
How wonderful is this‽ The latest research task I set for Amber was on HTTPS, and she has delivered her findings …as a poem!
Retrofit Your Website as a Progressive Web App — SitePoint
Turning your existing website into a progressive web “app”—a far more appealing prospect than trying to create an entirely new app-shell architecture:
…they are an enhancement of your existing website which should take no longer than a few hours and have no negative effect on unsupported browsers.
PushCrew Push Notifications for HTTP websites
A nasty service that Harry noticed in his role as chronicler of dark patterns—this exploits the way that browser permissions are presented below the line of death.
Troy Hunt: HTTPS adoption has reached the tipping point
Things are looking good for HTTPS.
The Guardian has moved to https 🔒 | Info | The Guardian
Details of The Guardian’s switch to HTTPS.
Adding Service Worker to a simple website - rossta.net
A nice little walkthrough of a straightforward Service Worker for a content-based site, like a blog.
HTTPS Adoption *doubled* this year
Slowly but surely the web is switching over to HTTPS. The past year shows a two to threefold increase.
ISP’s are updating your site without your permission
One more reason to make the switch to HTTPS.
Certbot
For your information, the Let’s Encrypt client is now called Certbot for some reason.
Carry on.
Adding HTTPS to your web site - Robert’s talk
Robert walks through the process he went through to get HTTPS up and running on his Media Temple site.
If you have any experience of switching to HTTPS, please, please share it.
HTTPS is Hard – The Yell Blog
Finally! An article about moving to HTTPS that isn’t simply saying “Hey, it’s easy and everyone should do it!” This case study says “Hey, it’s hard …and everyone should do it.”
The copy & paste guide to your first Service Worker
Minimum viable Service Worker tutorial. Copy, paste, and don’t ask questions.
Also:
Progressive web apps: the long game
Remy sums up the psychological end goal of progressive apps (HTTPS + Service Worker + manifest JSON file) prompting an add to home screen action:
This high bar of entry will create a new mental model for our users.
If I add this app to my home screen, it will work when I open it.
It’s a shame that this charge to turbo-boast the perception of the web on mobile is a bit one-sided: I would love to see Apple follow Google’s lead here. But if Android succeed in their goal, then I think iOS will have to follow suit just to compete.
Generate Mozilla Security Recommended Web Server Configuration Files
This is useful if you’re making the switch to HTTPS: choose your web server software and version to generate a configuration file.