Is dolphin-emu.org served by nginx or apache2?

[leolam]

According to sadm/nginx.conf, dolphin-emu.org is served by nginx. However, the headers indicate that the page was served by "Apache/2.2" (unless it is to trick possible attackers… sshhhh…).

So, is it served by nginx or apache? I'm asking this because the nginx SSL configuration is not secure (I really do appreciate the effort and the initiative), and it would be pointless to submit a PR for the nginx conf if you are not actually using nginx.

[Anti-Ultimate]

(12-23-2015, 06:21 PM)leolam Wrote: According to sadm/nginx.conf, dolphin-emu.org is served by nginx. However, the headers indicate that the page was served by "Apache/2.2" (unless it is to trick possible attackers… sshhhh…).

So, is it served by nginx or apache? I'm asking this because the nginx SSL configuration is not secure (I really do appreciate the effort and the initiative), and it would be pointless to submit a PR for the nginx conf if you are not actually using nginx.

I can't really answer your question but I'd like to know what this is

[leolam]

This is dolphin-emu.org's IPv6 address. Note the reference to hexspeak

[Parlane]

The nginx config file you mentioned is used for sites hosted on our dedicated server: https://www.ssllabs.com/ssltest/analyze.html?d=dl.dolphin-emu.org&latest

The apache server is because our web hosting is done via alwaysdata and we don't control their SSL config sadly.

[leolam]

Ahh, that's too bad. But it looks like that config file is not completely up-to-date, since SSLv3 is disabled in production. Seems that no change is needed then

Thanks for clarifying!

[delroth]

The web host we use for user facing services actually provides a closed beta for some better SSL support. We enrolled and now have a nice A from Qualys' test. Just need to enable HSTS at some point for A+

[leolam]

Yay! Thank you! it's rare to see an emulator project being so modern.