User Tools

Site Tools


projects:todo

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
projects:todo [2026/09/21 00:02] – [DNS] BLUG Adminprojects:todo [2026/09/22 01:38] (current) – ToDo checked: Rate-limit CPU intensive WordPress PHP pages BLUG Admin
Line 15: Line 15:
   * <todo>Publish HTTPS certificate fingerprints via DNS, implement secure automatic updates (difficult).</todo>   * <todo>Publish HTTPS certificate fingerprints via DNS, implement secure automatic updates (difficult).</todo>
   * <todo>Publish XMPP certificate fingerprints via DNS, implement secure automatic updates (difficult).</todo>   * <todo>Publish XMPP certificate fingerprints via DNS, implement secure automatic updates (difficult).</todo>
 +  * <todo>Advertise Alt-Svc support for HTTP/2 and HTTP/3.</todo>
 +
 ==== TCP ==== ==== TCP ====
  
   * <todo #shenmedouxing:2026-09-21>Enable ECN (Explicit Congestion Notification) and TCP BBR in Git repo</todo>.   * <todo #shenmedouxing:2026-09-21>Enable ECN (Explicit Congestion Notification) and TCP BBR in Git repo</todo>.
-  * <todo>Enable Firewall using the VPS provider's settings (not nftables)</todo>+  * <todo>Enable Firewall using the VPS provider's settings (not nftables, to save CPU)</todo>
 ==== HTTP ==== ==== HTTP ====
  
-  * <todo>Add all server names used by ACME challenges to Nginx in Git</todo> +  * <todo #shenmedouxing:2026-09-21>Add all server names used by ACME challenges to Nginx in Git</todo> 
-  * <todo>Fix Nginx's missing 80/443 port listens in Git</todo> +  * <todo #shenmedouxing:2026-09-21>Fix Nginx's missing 80/443 port listens in Git</todo> 
-  * <todo>Fix a TLS certificate renewal script bug.</todo> +  * <todo #shenmedouxing:2026-09-21>Fix a TLS certificate renewal script bug.</todo> 
-  * <todo>Enable HTTP/2 and HTTP/3 (QUIC)</todo>+  * <todo #shenmedouxing:2026-09-21>Enable HTTP/2 and HTTP/3 (QUIC)</todo>
   * <todo>Encrypted Client Hello (ECH)</todo>   * <todo>Encrypted Client Hello (ECH)</todo>
-  * <todo>Test Classical Diffie-Hellman for DoS Resistance (DHEat Attack)</todo>+  * <todo>Test classical Diffie-Hellman for DoS Resistance (DHEat Attack)</todo>
   * <todo>Update outdated Tor hidden services</todo>   * <todo>Update outdated Tor hidden services</todo>
 ==== PHP ==== ==== PHP ====
Line 35: Line 37:
   * <todo>WordPress should deploy caching to prevent the "Slashdot" effect, this is especially important in the era of clawers, benchmark needed via Apache <code>ab</code></todo>.   * <todo>WordPress should deploy caching to prevent the "Slashdot" effect, this is especially important in the era of clawers, benchmark needed via Apache <code>ab</code></todo>.
   * <todo>Audit Web pages for cookies and 3rd-party resources, proxy or remove them.</todo>   * <todo>Audit Web pages for cookies and 3rd-party resources, proxy or remove them.</todo>
-  * <todo>DokuWiki Anti-Spam</todo> +  * <todo>DokuWiki needs to implement anti-spam, spambots are already flooding in within a day after the server goes back online.</todo> 
-  * <todo>Rate-limit CPU intensive WordPress PHP pages</todo>+  * <todo>Delete over 1000 spam accounts in DokuWiki, without affecting legitimate accounts.</todo> 
 +  * <todo #shenmedouxing:2026-09-22>Rate-limit CPU intensive WordPress PHP pages</todo>
 ==== IRC ==== ==== IRC ====
  
Line 46: Line 49:
   * <todo>Outgoing port 25 traffic is blocked, circumvent SMTP blocking by hosting provider through a commercial or self-hosted relay</todo>   * <todo>Outgoing port 25 traffic is blocked, circumvent SMTP blocking by hosting provider through a commercial or self-hosted relay</todo>
   * <todo>OpenSMTPD standard compliance (rDNS, DKIM, SPF, DMARC).</todo>   * <todo>OpenSMTPD standard compliance (rDNS, DKIM, SPF, DMARC).</todo>
-  * <todo>SMTP forwarding test (root/webmaster/abuse/security to maintainers.</todo>+  * <todo>SMTP forwarding test (root/webmaster/abuse/securityto maintainers.</todo>
   * <todo>SMTP sending test (needed for PHP registration, password resets)</todo>   * <todo>SMTP sending test (needed for PHP registration, password resets)</todo>
   * <todo>SMTP TLS hardening (PQC, TLSv1.3, disable session ticket)</todo>   * <todo>SMTP TLS hardening (PQC, TLSv1.3, disable session ticket)</todo>
-  * <todo>SMTP should be tested for spam resistance, if root@beijinglug.club receives spam and it's forwarded, the server must not be blocked by GMail for spam.</todo>+  * <todo>SMTP should be tested for spam resistance, if root@ receives spam and it's forwarded, the server must not be blocked by Gmail for spam.</todo>
  
 ==== XMPP ==== ==== XMPP ====
Line 55: Line 58:
   * <todo>XMPP should publish abuse contacts</todo>   * <todo>XMPP should publish abuse contacts</todo>
   * <todo>XEP compliance tests</todo>   * <todo>XEP compliance tests</todo>
 +  * <todo #shenmedouxing:2026-09-22>Implement XMPP over HTTP (BOSH), commit changes to Git.</todo>
 +  * <todo>Implement XMPP over Websocket, commit changes to Git.</todo>
   * <todo><code>ircbindxmpp</code> and <code>chatlist</code> should be retested for startup timing and crash recovery</todo>   * <todo><code>ircbindxmpp</code> and <code>chatlist</code> should be retested for startup timing and crash recovery</todo>
   * <todo><code>ircbindxmpp</code> should use SASL External, with automatic certificate generation on first startup.</todo>   * <todo><code>ircbindxmpp</code> should use SASL External, with automatic certificate generation on first startup.</todo>
projects/todo.1789948976.txt.gz · Last modified: by BLUG Admin