Anatoli <m...@anatoli.ws> wrote: > > looking at the number of bytes moved in the sessions is sufficient to > > determine which firmwares were selected and downloaded. > > Theo, I may be completely wrong here (please excuse my ignorance if it > is the case), but I see it this way: > > On a shared server (or one fronted by a CDN)
firmware.openbsd.org is not a CDN, it is a DNS name pointing a handful of hosts, so everything else you wrote is irrelevant. I'm not sure why you bothered. > My question was about why not to cloud-front-with-https (like > cdn.openbsd.org is) the firmware sub-domain too (or > cdn.firmware.openbsd.org). Just my 2-cents-IMO :) Because we don't. End of story.