Skip to content

Commit

Permalink
add disqus comments
Browse files Browse the repository at this point in the history
  • Loading branch information
timebug committed Mar 10, 2015
1 parent 046bcd3 commit 21479d6
Show file tree
Hide file tree
Showing 3 changed files with 23 additions and 0 deletions.
14 changes: 14 additions & 0 deletions _includes/disqus.html
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
<div id="disqus_thread"></div>
<script type="text/javascript">
/* * * CONFIGURATION VARIABLES * * */
// Required: on line below, replace text in quotes with your forum shortname
var disqus_shortname = 'upyunio';

/* * * DON'T EDIT BELOW THIS LINE * * */
(function() {
var dsq = document.createElement('script'); dsq.type = 'text/javascript'; dsq.async = true;
dsq.src = '//' + disqus_shortname + '.disqus.com/embed.js';
(document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(dsq);
})();
</script>
<noscript>Please enable JavaScript to view the <a href="https://disqus.com/?ref_noscript" rel="nofollow">comments powered by Disqus.</a></noscript>
2 changes: 2 additions & 0 deletions _layouts/post.html
Original file line number Diff line number Diff line change
Expand Up @@ -13,3 +13,5 @@ <h1 class="post-title">{{ page.title }}</h1>
</article>

</div>

{% if page.comments %}{% include disqus.html %}{% endif %}
7 changes: 7 additions & 0 deletions _posts/2015-03-10-strong-ssl-security.markdown
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@ layout: post
title: 改善 HTTPS 访问安全性
date: 2015-03-10 11:43:23
author: timebug
comments: true
---

2014 年 4 月 OpenSSL 的心血漏洞 [Heartbleed](http://heartbleed.com/) 着实让大家对互联网安全捏了一把冷汗。同年 10 月份又相继爆出 [POODLE](http://en.wikipedia.org/wiki/POODLE) 安全漏洞攻击,该漏洞可以让攻击者利用 SSLv3 协议设计中的缺陷,通过中间人攻击的手段来窃取用户信息,Google 研究员最先披露了有关该漏洞的[细节](http://googleonlinesecurity.blogspot.co.uk/2014/10/this-poodle-bites-exploiting-ssl-30.html)
Expand Down Expand Up @@ -155,3 +156,9 @@ server {
~~~

以上配置在 NGINX 1.7.10 和 OpenSSL 1.0.2 上经过测试,同时也建议大家及时升级到相应的最新版本。

其他参考:

* [http://nginx.com/blog/nginx-poodle-ssl/]()
* [https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html]()
* [http://nginx.com/blog/nginx-05-june-2014-openssl-security-advisory/]()

0 comments on commit 21479d6

Please sign in to comment.