<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet href="/feeds.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:base="https://chameth.com/">
    <title>Chameth.com - posts like g15-ram-upgrade, the-meaning-of-life, why-you-should-be-using-https but not docker-automatic-nginx-proxy</title>
    <subtitle>Personal homepage of Chris Smith</subtitle>
    <link href="https://chameth.com/feeds/posts/like/g15-ram-upgrade,the-meaning-of-life,why-you-should-be-using-https/unlike/docker-automatic-nginx-proxy/" rel="self"/>
    <link href="https://chameth.com/"/>
    <icon>https://chameth.com/favicon.png</icon>
    <updated>2026-01-18T00:00:00Z</updated>
    <id>https://chameth.com/</id>
    <author>
        <name>Chris Smith</name>
    </author>
    <entry>
        <title>The meaning of life</title>
        <link href="https://chameth.com/the-meaning-of-life/"/>
        <updated>2026-01-18T00:00:00Z</updated>
        <id>https://chameth.com/the-meaning-of-life/</id>
        <content xml:lang="en" type="html">&lt;p&gt;Now that’s a grandiose title for a blog post! Blame &lt;a href=&#34;https://www.jeremiahlee.com/&#34;&gt;Jeremiah Lee&lt;/a&gt;, who selected it as the theme for
&lt;a href=&#34;https://www.jeremiahlee.com/posts/2026-01-indieweb-carnival/&#34;&gt;January’s IndieWeb Carnival&lt;/a&gt;. I’ve not taken part in this before,
but it’s basically a shared writing prompt. One person selects a theme, other people write about it on their own sites, and then
the host does a round-up linking to all the various responses. I’ve come across it a few times before, but the topics have
never really engaged me; they don’t feel like the sort of thing I’d write about. But… why not?&lt;/p&gt;
&lt;figure class=&#34;image right&#34;&gt;
  &lt;picture&gt;
      &lt;source srcset=&#34;https://chameth.com/the-meaning-of-life/goodlife.webp&#34; type=&#34;image/webp&#34;/&gt;
      &lt;source srcset=&#34;https://chameth.com/the-meaning-of-life/goodlife.avif&#34; type=&#34;image/avif&#34;/&gt;
      &lt;img src=&#34;https://chameth.com/the-meaning-of-life/goodlife.jpg&#34; alt=&#34;Cover of the book &amp;#39;A Guide to the Good Life&amp;#39; by William B. Irvine. It has the subtitle &amp;#39;the ancient art of stoic joy&amp;#39;, and is set over a picture of a statue.&#34; loading=&#34;lazy&#34; width=&#34;500&#34; height=&#34;700&#34;/&gt;
  &lt;/picture&gt;
  &lt;figcaption&gt;&lt;p&gt;A Guide to the Good Life&lt;/p&gt;
&lt;/figcaption&gt;
&lt;/figure&gt;
&lt;p&gt;The thing that actually tipped the scales for this particular topic was a book I was reading:
&lt;a href=&#34;https://www.google.co.uk/books/edition/_/yQ59JV_9AfIC&#34;&gt;A Guide to the Good Life&lt;/a&gt; by William B. Irvine. It’s basically a modern
introduction to Stoicism. Not only is there a strong overlap between that and the meaning of life, one particular idea resonated
with me:&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;In ancient Greece, when schools of philosophy were still prominent features of the cultural landscape, there were any
number of schools to which parents could send their children. Suppose we could travel back in time to 300 bc and take
a thinking person’s walking tour of Athens. We could begin our tour in the Agora, where Socrates a century earlier had
philosophized with the citizens of Athens. On the northern side of the Agora we would see the Stoa Poikile, or Painted
Porch, and holding forth there might be Zeno of Citium, the founder of the Stoic school of philosophy. This “porch” was
actually a colonnade decorated with murals.&lt;/p&gt;
&lt;/blockquote&gt;
&lt;p&gt;The idea that you could just wander around a city and come across people giving their considered opinions on philosophy
is… something. Do we have any actual equivalent of that in the modern ages? Obviously you do get people espousing their
views on the street, but they tend to either be proselytising or grinding a particular axe. And even if there was a modern
day Socrates talking in Speaker’s Corner, would anyone actually stop to listen? We do have books, and speaking engagements,
and so on, but they feel a lot more impersonal, and in a lot of cases motivated by money or politics or some other agenda.
The philosophers of ancient Greek and Rome seemed to actually practice what they preached; as well as talking in public,
and instructing in their schools, they’d write letters helping and advising people, or debating points of philosophy.&lt;/p&gt;
&lt;p&gt;Some of that behaviour exists in academia, I’m sure, but it’s not really accessible to the person on the street in the way
that it once was. But we do have personal websites and blogs. People just exchanging ideas, speaking out in public, with
(generally) no expectation of reward or recognition for it. Is the “IndieWeb” the modern Agora? Probably not, but maybe it
gives us some aspects of it that we otherwise wouldn’t have?&lt;/p&gt;
&lt;h3 id=&#34;the-stoic-approach-to-life&#34;&gt;The Stoic approach to life&lt;/h3&gt;
&lt;p&gt;The Stoics believed in living a virtuous life; living as we were designed to live, in accordance with nature. A lot of
those terms might be a bit loaded to the modern ear, and “designed to live” is awfully vague. I think this quote
expands on it pretty well, though:&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;And for what function were people designed? To answer this question, the Stoics thought, we need only examine ourselves.
On doing this, we will discover that we have certain instincts, as do all animals. We experience hunger; this is
nature’s way of getting us to nourish ourselves. We also experience lust; this is nature’s way of getting us to
reproduce. But we differ from other animals in one important respect: We have the ability to reason. From this we
can conclude, Zeno would assert, that we were designed to be reasonable.&lt;/p&gt;
&lt;p&gt;And if we use our reason, we will further conclude that we were designed to do certain things, that we have certain
duties. Most significantly, since nature intended us to be social creatures, we have duties to our fellow men. We
should, for example, honor our parents, be agreeable to our friends, and be concerned with the interests of our
countrymen.&lt;/p&gt;
&lt;/blockquote&gt;
&lt;p&gt;It all seems eminently reasonable. But in a world of fake news, social media, culture wars, and everything else,
our ability to reason often seems forgotten. Hell, even being agreeable seems like it’s out of vogue at the moment.
Would the Stoics despair if you transported one of them to the present day? Probably not. One of the other tenets
they held was, well, being stoic. There was a concept of tranquility:&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;Stoic tranquility was a psychological state marked by the absence of negative emotions, such as grief, anger,
and anxiety, and the presence of positive emotions, such as joy.&lt;/p&gt;
&lt;/blockquote&gt;
&lt;p&gt;To get to this magical state, you need a form of detachment. Not in the sense of being completely passive and
impartial as you float through life; that’s not how we’re “designed to life”. But in the sense of not letting
outside events influence your inner state. When someone says something horrible, they don’t have the power to
actually make you feel bad; that’s something you do. And I fully accept that it’s very easy to say that, and
very hard to actually practice it.&lt;/p&gt;
&lt;p&gt;This is actually a concept shared with many other religions and philosophies. Buddhism has the idea of
&lt;a href=&#34;https://en.wikipedia.org/wiki/Nekkhamma&#34;&gt;Nekkhamma&lt;/a&gt;, Jainism and Hinduism have
&lt;a href=&#34;https://en.wikipedia.org/wiki/Vairagya&#34;&gt;Vairāgya&lt;/a&gt;, and so on. Even if you don’t put any stock at all
into religious teachings, it’s interesting that this concept comes up again and again.&lt;/p&gt;
&lt;p&gt;If you’re like me, you probably have &lt;em&gt;thoughts&lt;/em&gt; on all this. Sure, anxiety-free, anger-free life is
probably nice, but how does that relate to the &lt;em&gt;meaning&lt;/em&gt; of life and, anyway, shouldn’t you &lt;em&gt;be&lt;/em&gt; angry
about some things? The Stoics (particularly the Roman ones, who tended to not be so into physics and
ethics) believed that this tranquility made it easier to focus on being virtuous. That makes sense to
me; if we manage to get off the hedonistic treadmill of wanting shiny new things, of hoping people
like our posts, and so on, then there’s surely more time in life for other pursuits. As for anger, I
think the point is you don’t let the emotions drive your behaviour. There’s a difference between
getting angry at what someone is saying and punching them in the face, and hearing someone, calmly
and rationally assessing matters, and then punching them in the face. Maybe it’s best for society to
punch certain people in the face. The Stoics were certainly not pacifists. Marcus Aurelius is one of
the most well known, and he was Emperor of Rome. He’s hailed as one of the few good emperors, but you
can bet he had an awful lot of blood on his hands even so.&lt;/p&gt;
&lt;h3 id=&#34;putting-it-into-practice&#34;&gt;Putting it into practice&lt;/h3&gt;
&lt;p&gt;It’s all well and good going on about not letting things bother you, but it’s very much easier
said than done. The book introduces the concept of “negative visualisation”: imagining the negative
things that could happen in your life, and thus starting to accept them. It also helps you to
appreciate things that you do have, that you otherwise taken for granted. I’m sure everyone’s
imagined what would happen if you lost your home, or your job, or so on… but what if you didn’t
have your favourite mug? A particular tool? A certain piece of art?&lt;/p&gt;
&lt;p&gt;I’ve heard of gratitude journals before. I’ve even tried keeping one for a while. There’s science
showing it’s beneficial for mental health. But I always faded off after a short while. Once you tick
off the big things: friends, family, food, etc, it feels like a stretch. Negative visualisation
feels like a much better approach to me. I’m about to eat an apple; at the end of the day I’m not
going to think back and write about an apple in a gratitude journal. But I can think briefly, in
the moment, about not having the apple. Do I need to prepare myself for an apple-less life? Not
really. But do I now appreciate the apple a little bit more, and take it for granted a little
bit less? Yes. Does that make me a bit more tranquil? A bit less likely to wish I had something
&lt;em&gt;tastier&lt;/em&gt; than an apple? Also yes.&lt;/p&gt;
&lt;p&gt;This process dovetails into the concept of impermanence, another concept found in Buddhism and
elsewhere. Each apple could be the last one you ever have. If you knew that in advance, how
would it change your approach? You’d probably savour it a bit more, appreciate it a bit more,
and most of all not take it for granted. There’s a lot of pithy sayings about treating each
day as if it’s your last, but at that level they’re a lot more nebulous than helpful;
appreciating an apple, though? That’s something I can do.&lt;/p&gt;
&lt;p&gt;It seems at first glance that thinking about negatives should be depressing or anxiety inducing.
There are only so many reasons that this could be my last apple, and most of them involve
something pretty unideal happening to me. But I don’t think it’s actually that glum. You don’t
dwell on the negative, instead you use it to inspire a positive. And the alternative is to
just sleepwalk through the process, not really paying attention, not gaining any enjoyment from
it.&lt;/p&gt;
&lt;h3 id=&#34;bringing-it-back&#34;&gt;Bringing it back&lt;/h3&gt;
&lt;p&gt;Thanks for sticking with me on that tangent. You’ll be glad to know I’ve finished eating my
apple now. The topic for this post was meant to be “the meaning of life”, not “thoughts on
eating apples” or “living a Stoic life”, so allow me to try to tie it all together and
pretend that I had a plan.&lt;/p&gt;
&lt;p&gt;Life has no inherent meaning, it’s just a biological process. But that doesn’t mean we can’t
seek to have a meaningful existence. The Stoics believed that involved being &lt;em&gt;reasonable&lt;/em&gt;,
and one of the approaches to give the reasoning room to happen is to strive towards an
inner state of tranquility.&lt;/p&gt;
&lt;p&gt;Obviously the Stoic approach isn’t the only one. And I’m not sure I did their philosophies
&lt;em&gt;any&lt;/em&gt; justice in my writing here. If it sparked your interest, though, I highly recommend
picking up the book. If not, other approaches to life are available…&lt;/p&gt;
&lt;figure class=&#34;image full&#34;&gt;
  &lt;picture&gt;
      &lt;source srcset=&#34;https://chameth.com/the-meaning-of-life/excellent.avif&#34; type=&#34;image/avif&#34;/&gt;
      &lt;source srcset=&#34;https://chameth.com/the-meaning-of-life/excellent.webp&#34; type=&#34;image/webp&#34;/&gt;
      &lt;img src=&#34;https://chameth.com/the-meaning-of-life/excellent.jpg&#34; alt=&#34;Screengrab from Bill &amp;amp; Ted&amp;#39;s Excellent Adventure, with the two stood side by side, one arm stretched out towards the crowd, and the other over their hearts&#34; loading=&#34;lazy&#34; width=&#34;1801&#34; height=&#34;765&#34;/&gt;
  &lt;/picture&gt;
  &lt;figcaption&gt;&lt;p&gt;Be excellent to each other… and party on, dudes.&lt;/p&gt;
&lt;/figcaption&gt;
&lt;/figure&gt;
</content>
    </entry>
    <entry>
        <title>Upgrading the RAM in a Dell G15 laptop</title>
        <link href="https://chameth.com/g15-ram-upgrade/"/>
        <updated>2023-07-29T00:00:00Z</updated>
        <id>https://chameth.com/g15-ram-upgrade/</id>
        <content xml:lang="en" type="html">&lt;figure class=&#34;image left&#34;&gt;
  &lt;picture&gt;
      &lt;source srcset=&#34;https://chameth.com/g15-ram-upgrade/g15.avif&#34; type=&#34;image/avif&#34;/&gt;
      &lt;source srcset=&#34;https://chameth.com/g15-ram-upgrade/g15.webp&#34; type=&#34;image/webp&#34;/&gt;
      &lt;img src=&#34;https://chameth.com/g15-ram-upgrade/g15.png&#34; alt=&#34;An open Dell G15 laptop&#34; loading=&#34;lazy&#34; width=&#34;580&#34; height=&#34;402&#34;/&gt;
  &lt;/picture&gt;
  &lt;figcaption&gt;&lt;p&gt;The Dell G15&lt;/p&gt;
&lt;/figcaption&gt;
&lt;/figure&gt;
&lt;p&gt;I currently use a Dell G15 laptop for work. It has served me well for a little
over a year, but recently it has been struggling a little with my day-to-day
workload. It came with 32GB of RAM — the highest possible specification at the
time&lt;sup id=&#34;fnref:1&#34;&gt;&lt;a class=&#34;footnote-ref&#34; href=&#34;#fn:1&#34; role=&#34;doc-noteref&#34;&gt;1&lt;/a&gt;&lt;/sup&gt; — but that is apparently no longer enough for me.&lt;/p&gt;
&lt;p&gt;For a recent project, I was working on a Rust library used in an Android app.
That meant running the usual glut of Android tools (Android Studio, an emulator
and at least one Gradle daemon) alongside a normal IDE (IntelliJ IDEA). Throw
in a web browser and a couple of electron apps, and I often managed to
use all 32GB.&lt;/p&gt;
&lt;p&gt;When you start swapping memory out to an encrypted disk — even an SSD — it
doesn’t make for great performance. At first, I tried to work around this
by enabling the Linux out-of-memory (OOM) killer, but it turns out that it’s not
too good with Electron apps: it will kill the large browser process, but then
the small Electron wrapper will just respawn it.&lt;/p&gt;
&lt;!--more--&gt;
&lt;h3 id=&#34;can-it-be-upgraded-or-not&#34;&gt;Can it be upgraded or not?&lt;/h3&gt;
&lt;p&gt;The obvious solution to not having enough RAM is to add more RAM. A quick look
in the manual showed this might not be possible, though. The manual includes
the following “Memory specifications” table:&lt;/p&gt;
&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Description&lt;/th&gt;
&lt;th&gt;Values&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Memory slots&lt;/td&gt;
&lt;td&gt;Two SODIMM slots&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Memory type&lt;/td&gt;
&lt;td&gt;DDR5&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Memory speed&lt;/td&gt;
&lt;td&gt;4800&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Maximum memory configuration&lt;/td&gt;
&lt;td&gt;32GB&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Minimum memory configuration&lt;/td&gt;
&lt;td&gt;8GB&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Memory size per slot&lt;/td&gt;
&lt;td&gt;8GB or 16GB&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Memory configurations supported&lt;/td&gt;
&lt;td&gt;&lt;ul&gt;&lt;li&gt;8 GB, 1 x 8 GB, DDR5, 4800 MHz&lt;/li&gt;&lt;li&gt;16 GB, 1 x 16 GB, DDR5, 4800 MHz&lt;/li&gt;&lt;li&gt;16 GB, 2 x 8 GB, DDR5, 4800 MHz, dual-channel&lt;/li&gt;&lt;li&gt;32 GB, 2 x 16 GB, DDR5, 4800 MHz, dual-channel&lt;/li&gt;&lt;/ul&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;
&lt;p&gt;That unambiguously says that an upgrade from 32GB is not possible. I gave up.&lt;/p&gt;
&lt;p&gt;Later though, I was complaining about memory issues to a friend, and he pointed
out a Dell forum thread where a couple of people claim to have successfully
installed dual-channel 32GB modules. Since the alternative was getting an
entire new PC after only a year, I decided to give it a go.&lt;/p&gt;
&lt;h3 id=&#34;the-upgrade-attempt&#34;&gt;The upgrade attempt&lt;/h3&gt;
&lt;p&gt;I ordered a pair of Crucial 32GB DDR5-4800 SODIMMs, and after they turned up
dismantled the laptop. The G15 comes apart pretty normally: there are uncovered
screws on the bottom holding the lower part of the case on. With those
removed and some gentle prying, it pops off, and you get access to the battery,
GPU and motherboard.&lt;/p&gt;
&lt;p&gt;The first thing I saw was this:&lt;/p&gt;
&lt;figure class=&#34;image full&#34;&gt;
  &lt;picture&gt;
      &lt;source srcset=&#34;https://chameth.com/g15-ram-upgrade/motherboard.avif&#34; type=&#34;image/avif&#34;/&gt;
      &lt;source srcset=&#34;https://chameth.com/g15-ram-upgrade/motherboard.webp&#34; type=&#34;image/webp&#34;/&gt;
      &lt;img src=&#34;https://chameth.com/g15-ram-upgrade/motherboard.jpg&#34; alt=&#34;The G15 motherboard, with a large &amp;#34;DDR5 8G/16G Only&amp;#34; label, and a smaller &amp;#34;DIMM B DDR5 8G/16G&amp;#34; label next to a SODIMM slot&#34; loading=&#34;lazy&#34; width=&#34;1536&#34; height=&#34;1300&#34;/&gt;
  &lt;/picture&gt;
  &lt;figcaption&gt;&lt;p&gt;The G15 motherboard adamantly proclaiming that it doesn’t want 32GB SODIMMs&lt;/p&gt;
&lt;/figcaption&gt;
&lt;/figure&gt;
&lt;p&gt;Not one but two labels that indicate it will only accept 8GB or 16GB modules.
Oh well, what’s the worst that can happen?&lt;/p&gt;
&lt;h3 id=&#34;oops&#34;&gt;Oops?&lt;/h3&gt;
&lt;p&gt;I dutifully installed the new modules, reconnected the battery and put the
case back together. I pressed the power button, and… nothing. None of the
usual garish lights that immediately come on, no screen output, just a dead
laptop. After reading some more of the user manual, I found that there is a tiny
status LED on the side next to the ethernet port. Forcing the laptop to power
off and back on again, the status LED blinked a distress code at me: 2 amber
blinks, 4 white blinks. The manual says that is — unsurprisingly — a memory
fault.&lt;/p&gt;
&lt;p&gt;I figured at this point that the manual and labels on the motherboard were
probably right. I took the laptop apart again, reinstalled the original 2x16GB
modules, reassembled it, and pressed the power button. It didn’t boot. I don’t
spend a lot of time fiddling inside computers, but I’ve done it enough that
I’m reasonably confident I can’t entirely break a computer while swapping some
RAM modules. I took to Googling&lt;sup id=&#34;fnref:2&#34;&gt;&lt;a class=&#34;footnote-ref&#34; href=&#34;#fn:2&#34; role=&#34;doc-noteref&#34;&gt;2&lt;/a&gt;&lt;/sup&gt;, and found an interesting article that said
Dell laptops don’t like to boot after RAM changes unless you clear the CMOS by
popping out the battery for 15 minutes.&lt;/p&gt;
&lt;p&gt;I opened the laptop up, and looked around for the CMOS battery. There wasn’t
one. Turns out they don’t exist any more. I left the main battery disconnected
for a while to see if it would help, and it didn’t.&lt;/p&gt;
&lt;h3 id=&#34;unexpected-success&#34;&gt;Unexpected success&lt;/h3&gt;
&lt;p&gt;I started to get worried: if I couldn’t fix this, I wouldn’t be able to
work until I got a new PC, and that wasn’t really in my budget at the minute.
I sat reading old forum threads and help guides&lt;sup id=&#34;fnref:3&#34;&gt;&lt;a class=&#34;footnote-ref&#34; href=&#34;#fn:3&#34; role=&#34;doc-noteref&#34;&gt;3&lt;/a&gt;&lt;/sup&gt;, none of which were actually
useful. Out of nowhere, though, the laptop booted up.&lt;/p&gt;
&lt;p&gt;Naturally, I immediately shut the laptop down again, opened it up, and switched
back to the new RAM modules. Then I turned it on again and sat waiting. After
about 15 minutes of it looking totally dead, it turned on and showed a BIOS
warning about the hardware configuration being changed. It then booted perfectly
normally, and all 64GB of RAM was visible and usable.&lt;/p&gt;
&lt;p&gt;My theory is that the forum threads were right: Dell laptops are funny about
RAM upgrades. But somehow in removing the physical CMOS battery, they’ve kept
the same “you have to wait 15 minutes” behaviour just without any indication
that’s what’s happening. Regardless, I now have enough RAM even for the
greediest of IDEs and Electron apps.&lt;/p&gt;
&lt;div class=&#34;footnotes&#34; role=&#34;doc-endnotes&#34;&gt;
&lt;hr/&gt;
&lt;ol&gt;
&lt;li id=&#34;fn:1&#34;&gt;
&lt;p&gt;Bizarrely, the maximum spec has &lt;em&gt;decreased&lt;/em&gt; to 16GB since then. &lt;a class=&#34;footnote-backref&#34; href=&#34;#fnref:1&#34; role=&#34;doc-backlink&#34;&gt;↩︎&lt;/a&gt;&lt;/p&gt;
&lt;/li&gt;
&lt;li id=&#34;fn:2&#34;&gt;
&lt;p&gt;In the generic sense. I use &lt;a href=&#34;https://kagi.com/&#34;&gt;Kagi&lt;/a&gt; these days. &lt;a class=&#34;footnote-backref&#34; href=&#34;#fnref:2&#34; role=&#34;doc-backlink&#34;&gt;↩︎&lt;/a&gt;&lt;/p&gt;
&lt;/li&gt;
&lt;li id=&#34;fn:3&#34;&gt;
&lt;p&gt;On my phone because, y’know, the laptop was busted. &lt;a class=&#34;footnote-backref&#34; href=&#34;#fnref:3&#34; role=&#34;doc-backlink&#34;&gt;↩︎&lt;/a&gt;&lt;/p&gt;
&lt;/li&gt;
&lt;/ol&gt;
&lt;/div&gt;
</content>
    </entry>
    <entry>
        <title>Why you should be using HTTPS</title>
        <link href="https://chameth.com/why-you-should-be-using-https/"/>
        <updated>2016-06-17T00:00:00Z</updated>
        <id>https://chameth.com/why-you-should-be-using-https/</id>
        <content xml:lang="en" type="html">&lt;figure class=&#34;image left&#34;&gt;
  &lt;picture&gt;
      &lt;source srcset=&#34;https://chameth.com/why-you-should-be-using-https/https-everywhere.avif&#34; type=&#34;image/avif&#34;/&gt;
      &lt;source srcset=&#34;https://chameth.com/why-you-should-be-using-https/https-everywhere.webp&#34; type=&#34;image/webp&#34;/&gt;
      &lt;img src=&#34;https://chameth.com/why-you-should-be-using-https/https-everywhere.jpg&#34; alt=&#34;The EFF&amp;#39;s HTTPS Everywhere logo&#34; loading=&#34;lazy&#34; width=&#34;300&#34; height=&#34;260&#34;/&gt;
  &lt;/picture&gt;
  &lt;figcaption&gt;&lt;p&gt;The EFF’s HTTPS Everywhere logo&lt;/p&gt;
&lt;/figcaption&gt;
&lt;/figure&gt;
&lt;p&gt;One of my favourite hobbyhorses recently has been the use of HTTPS, or lack thereof. HTTPS is the
thing that makes the little padlock appear in your browser, and has existed for over 20 years.
In the past, that little padlock was the exclusive preserve of banks and other ‘high security’
establishments; over time its use has gradually expanded to most (but not all) websites
that handle user information, and the time is now right for it to become ubiquitous.&lt;/p&gt;
&lt;h3 id=&#34;why-use-https&#34;&gt;Why use HTTPS?&lt;/h3&gt;
&lt;p&gt;There are numerous advantages to using HTTPS, both for the users of a website and for the
operator:&lt;/p&gt;
&lt;h4 id=&#34;privacy&#34;&gt;Privacy&lt;/h4&gt;
&lt;p&gt;The most obvious advantage is that HTTPS gives your users additional privacy. An insecure (HTTP)
request can potentially be read by anyone on the same network, or the network operators, or anyone
who happens to operate a network along the path between the user and the server.&lt;/p&gt;
&lt;p&gt;Users on shared WiFi networks (such as those in coffee shops, hotels, or offices) are particularly
vulnerable to passive sniffing by anyone else on that network. If the network is open (as is
frequently the case) then anyone in radio range can see exactly what the user is up to.&lt;/p&gt;
&lt;!--more--&gt;
&lt;h4 id=&#34;integrity&#34;&gt;Integrity&lt;/h4&gt;
&lt;p&gt;HTTPS also helps to maintain the integrity of your site. With a plain HTTP request, there’s nothing
to stop anyone in between the server and the user from modifying the content of the request or the
response. This is a frequent tactic used by annoying WiFi gateways (such as the ones &lt;a href=&#34;http://justinsomnia.org/2012/04/hotel-wifi-javascript-injection/&#34;&gt;you’d find in
a hotel&lt;/a&gt;), dubious ISPs who want
to serve you extra adverts, or just plain old nefarious attackers.&lt;/p&gt;
&lt;p&gt;If you’re trying to convey some kind of information to users (and if you aren’t, why exactly are
you running a website again?) it seems beneficial to both you and them if the information arrives
as you intended, rather than in a modified form due to someone or something tampering with it.&lt;/p&gt;
&lt;h4 id=&#34;security&#34;&gt;Security&lt;/h4&gt;
&lt;p&gt;If your website has any kind of authentication, or session identifiers, it becomes extremely
vulnerable to an attacker monitoring the traffic and stealing the credentials. This was
starkly demonstrated in 2010 when &lt;a href=&#34;https://en.wikipedia.org/wiki/Firesheep&#34;&gt;Firesheep&lt;/a&gt; was
released. This tool allowed anyone to quickly and automatically hijack social media accounts of
anyone on the same network who was using HTTP to access them.&lt;/p&gt;
&lt;p&gt;Even if your login pages are served over HTTPS, if you send a single session ID cookie over HTTP
(such as a page you decided wasn’t particularly ‘important’) then an attacker can probably spoof
the user’s session and gain full access to their account.  Again, in the case of open WiFi networks
that could be anyone in radio range.&lt;/p&gt;
&lt;h4 id=&#34;search-engine-rankings&#34;&gt;Search engine rankings&lt;/h4&gt;
&lt;p&gt;Some search engines use HTTPS as a signal in their ranking algorithms. &lt;a href=&#34;https://security.googleblog.com/2014/08/https-as-ranking-signal_6.html&#34;&gt;Google announced in
2004&lt;/a&gt; that it was using
the presence of HTTPS as a small positive signal, but that it may strengthen that signal over time
as more and more websites switch to using a secure transport. It’s not unthinkable that at some
point in the future there will be HTTPS-only search engines.&lt;/p&gt;
&lt;h3 id=&#34;but-but-but&#34;&gt;But… But… But…&lt;/h3&gt;
&lt;p&gt;There are lots of excuses for not implementing HTTPS. Most of them are either misguided or outdated.&lt;/p&gt;
&lt;h4 id=&#34;its-too-expensive-andor-complicated&#34;&gt;It’s too expensive and/or complicated&lt;/h4&gt;
&lt;p&gt;In the past, getting HTTPS certificates was a pain. A number of free suppliers have existed for
a while but the process for getting their certificates wasn’t particularly straight forward, and
many imposed arbitrary restrictions on the certificate parameters. Even once you had the
certificate, you had to fiddle about with your HTTP server configuration to make it work, remember
to manually get a new certificate when the old one expired, and lots of other annoying busywork.&lt;/p&gt;
&lt;p&gt;With the arrival of &lt;a href=&#34;https://letsencrypt.org/&#34;&gt;Let’s Encrypt&lt;/a&gt;, all that changed. You can retrieve
and deploy a free HTTPS certificate with two or three commands. Renewal can be handled completely
automatically with a single command executed by cron.&lt;/p&gt;
&lt;h4 id=&#34;theres-no-point-nothing-on-my-site-is-sensitive&#34;&gt;There’s no point; nothing on my site is sensitive&lt;/h4&gt;
&lt;p&gt;You might not think your content warrants privacy, but can you speak for everyone who accesses it?
Even content that seems mundane to you — such as travel advice, or technical writing — could be
used to build up a profile of a user. If an attacker is monitoring traffic in a coffee shop and
sees a user looking at travel advice and weather forecasts for a foreign country, he could use that
information to plan a burglary knowing that the user will be away. Similarly, some content which
is perfectly mundane to you may actually be very sensitive in other countries with repressive
governments. HTTPS makes it much harder for these people to snoop on traffic.&lt;/p&gt;
&lt;p&gt;From another angle, if you’re offering any kind of information, instructions, or especially file
downloads, there’s a severe risk to users if the content is modified on its way to them. An evil
sysadmin could rewrite your travel advice to suggest visiting the local drug dealer’s hangout, or
replace your download with a malware-infested version.&lt;/p&gt;
&lt;h4 id=&#34;https-is-slower-uses-more-resources-etc&#34;&gt;HTTPS is slower, uses more resources, etc&lt;/h4&gt;
&lt;p&gt;Back in 1995 this might have been a valid argument. Enabling HTTPS on a modern server will make
an almost negligible difference to performance. If you also enable HTTP/2 (which most
implementations only support over HTTPS), it’s likely to actually use fewer resources, and result
in a faster, smoother experience for your users. HTTP/2 was designed to work with HTTPS, and
designed with modern requirements and networking techniques in mind.&lt;/p&gt;
&lt;p&gt;CloudFlare have an &lt;a href=&#34;https://www.cloudflare.com/http2/&#34;&gt;excellent demonstration&lt;/a&gt; of the benefits of
HTTP/2, and it can show speed improvements of 2-3x in a typical environment. On top of being faster,
HTTP/2 uses fewer connections which results in less resource overhead on both the server and the
client.&lt;/p&gt;
&lt;h3 id=&#34;so-what-are-you-waiting-for&#34;&gt;So what are you waiting for?&lt;/h3&gt;
&lt;p&gt;If you run a website and aren’t using HTTPS, &lt;a href=&#34;https://certbot.eff.org/&#34;&gt;give it a try&lt;/a&gt;.&lt;/p&gt;
</content>
    </entry>
</feed>
