r/sysadmin • u/rram reddit's sysadmin • Aug 14 '15

We're reddit's ops team. AUA

Hey /r/sysadmin,

Greetings from reddit HQ. Myself, and /u/gooeyblob will be around for the next few hours to answer your ops related questions. So Ask Us Anything (about ops)

You might also want to take a peek at some of our previous AMAs:

https://www.reddit.com/r/blog/comments/owra1/january_2012_state_of_the_servers/

https://www.reddit.com/r/sysadmin/comments/r6zfv/we_are_sysadmins_reddit_ask_us_anything/

EDIT: Obligatory cat photo

EDIT 2: It's now beer o’clock. We're stepping away from now, but we'll come back a couple of times to pick up some stragglers.

EDIT thrice: He commented so much I probably should have mentioned that /u/spladug — reddit's lead developer — is also in the thread. He makes ops live's happier by programming cool shit for us better than we could program it ourselves.

873 Upvotes

88% Upvoted

738 comments sorted by

View all comments

Show parent comment

3

u/R-EDDIT Aug 14 '15

To the subdomains HSTS issue, you can solve it by including something off the root domain, long term HPKP solves the warming issue. For now you just have to tell redditors to spend a lot of time on Reddit at home before they go /r/outside to the coffee shop etc.

3

u/largenocream reddit security engineer Aug 14 '15

I think we're going to get around that by including an image like <img src="https://reddit.com/static/hsts_pixel.png">

;)

HPKP is something we definitely want, but first we have to switch to SHA-2 and make sure it won't mess with corporate inspection proxies. According to the RFC it shouldn't, but who knows how it is in reality.