---
title: "#134: Chrome to Force '.dev' Domains to HTTPS via Preloaded HSTS"
publication: "StatusCode Weekly"
issue: 134
published_at: "2017-09-20"
canonical_url: "https://weekly.statuscode.com/issues/134"
---

WebOps Weekly 134   . 

The latest Web operations, HTTP, and Web performance news -[Read this on the Web](https://webopsweekly.com/issues/134) 

[![WebOps Weekly\](https://webopsweekly.com/images/webops-header.png)](https://webopsweekly.com) Issue 134 — September 20, 2017     

[RFC 8246: A Proposal for Immutable HTTP Responses](https://tools.ietf.org/html/rfc8246?utm_source=webopsweekly&utm_medium=email) news A Mozilla developer is proposing a Cache-Control extension so clients can identify responses that will _not_ be updated during their freshness lifetimes. [Related discussion](https://news.ycombinator.com/item?id=15256105). IETF [On-Demand Environments with Docker and AWS ECS](http://mherman.org/blog/2017/09/18/on-demand-test-environments-with-docker-and-aws-ecs/?utm_source=webopsweekly&utm_medium=email#.WcJIYNOGMy4) tutorial An in-depth look at how to spin up reproducible (and easily-destructible), on-demand test environments with Docker, Amazon EC2 Container Service (ECS), and Circle CI (for continuous integration and delivery). Michael Herman [Analyzing a Million 'robots.txt' Files](https://intoli.com/blog/analyzing-one-million-robots-txt-files/?utm_source=webopsweekly&utm_medium=email) story The findings from setting up a simple web scraper to download the robots.txt files from the Alexa top one million sites. Evan Sangaline [Analysis of the Vulnerability in the Apache Struts RCE REST Plugin [CVE-2017-9805\]](https://www.incapsula.com/blog/cve-2017-9805-analysis-of-vulnerability-in-apache-struts-rce-rest-plugin.html?utm_source=webops&utm_medium=article&utm_campaign=sponsored) CVE-2017-9805, a vulnerability in the Apache Struts REST plugin, if exploited lets a remote attacker run malicious code on the application server. Imperva Incapsulasponsored[![\](https://copm.s3.amazonaws.com/024388c8.png)](https://www.incapsula.com/blog/cve-2017-9805-analysis-of-vulnerability-in-apache-struts-rce-rest-plugin.html?utm_source=webops&utm_medium=article&utm_campaign=sponsored) [Chrome to Force '.dev' Domains to HTTPS via Preloaded HSTS](https://ma.ttias.be/chrome-force-dev-domains-https-via-preloaded-hsts/?utm_source=webopsweekly&utm_medium=email) news A future version of Chrome may force all domains ending on .dev (and .foo) to be redirected to HTTPs via a preloaded HTTP Strict Transport Security (HSTS) header. Mattias Geniar [Microservices Without Servers](https://www.youtube.com/watch?v=znCBbrYeUA4&utm_source=webopsweekly&utm_medium=email) video A 40 minute talk charting one developer’s progression from the headache of managing servers to using serverless approaches. Glynn Bird [Pain(less) NGINX Ingress](http://danielfm.me/posts/painless-nginx-ingress.html?utm_source=webopsweekly&utm_medium=email) opinion Things learned using the NGINX ingress controller in production. Daniel Martins [Docker Official Images Are Now Multi-Platform](https://blog.docker.com/2017/09/docker-official-images-now-multi-platform/?utm_source=webopsweekly&utm_medium=email) news Docker has rolled out an update to their official images to make them multi-platform aware. Michael Friis [Check Out Our Weekly 'Serverless' Newsletter](https://serverless.email/issues/20?utm_source=webopsweekly&utm_medium=email) news We produce [lots of newsletters](https://cooperpress.com/publications/) like WebOps Weekly, but one that may interest you is [Serverless Status](https://serverless.email/). Check out [the latest issue](https://serverless.email/issues/20). Cooperpress Jobs [DevOps Engineer for a Distributed Messaging Platform](http://jobs.ably.io/o/devops-engineer-for-ablys-distributed-platform-remote-london) We’re solving complex distributed problems with significant infrastructure scale. If you enjoy challenging your grey matter, [apply](http://jobs.ably.io/o/devops-engineer-for-ablys-distributed-platform-remote-london). Ably realtime [Let Thousands of Companies Apply to You. Get Hired on Hired.](https://hired.com/join/?utm_source=petercooperpress&utm_medium=sponsor&utm_campaign=%28b2c%29%28l-all%29%28r-swe%29%28q3-17-webops-weekly%29) Save time on your job search. Hired delivers multiple, high-quality job offers to you. Sign up today. Hired In brief [Ansible 2.4 Now Generally Available](https://www.redhat.com/en/blog/ansible-project-24-now-generally-available?utm_source=webopsweekly&utm_medium=email) news Now supports Python 3. Red Hat [Introducing Managed SSL for Google App Engine](https://cloudplatform.googleblog.com/2017/09/introducing-managed-SSL-for-Google-App-Engine.html?utm_source=webopsweekly&utm_medium=email) news Lorne Kligerman [Twilio Introduces 'Studio', a Visual Programming Environment](https://www.twilio.com/blog/2017/09/introducing-twilio-studio.html?utm_source=webopsweekly&utm_medium=email) news The telecoms services provider takes their serverless approach a step further. Twilio [2017 Chrome Developer Summit is coming to San Francisco](https://developer.chrome.com/devsummit/?utm_source=cooperpress&utm_medium=webopsweekly&utm_campaign=chromedevsummit) news Join us in San Francisco or on the live stream as we explore building beautiful and performant experiences. Google, Inc.​ sponsored [AWS Announces Per-Second Billing for EC2 Instances](https://techcrunch.com/2017/09/18/aws-announces-per-second-billing-for-ec2-instances/?utm_source=webopsweekly&utm_medium=email) news Frederic Lardinois [Amazon EC2 Spot Can Now Stop and Start Your Spot Instances](https://aws.amazon.com/about-aws/whats-new/2017/09/amazon-ec2-spot-can-now-stop-and-start-your-spot-instances/?utm_source=webopsweekly&utm_medium=email) news Amazon Web Services [Microsoft Unveils Project Honolulu, A New GUI for Server Administration](https://arstechnica.com/gadgets/2017/09/microsoft-building-a-new-graphical-interface-for-managing-windows-servers/?utm_source=webopsweekly&utm_medium=email) news Peter Bright [Web Performance 101: HTTP Headers](https://dzone.com/articles/web-performance-101-http-headers?utm_source=webopsweekly&utm_medium=email) tutorial Kameerath Kareem [Monitoring SSL Certificate Expiry in GCP and Kubernetes](https://roobert.github.io/2017/09/13/Monitoring-SSL-Certificate-Expiry/?utm_source=webopsweekly&utm_medium=email) tutorial roobert.​github.​io [Learn From Your Attackers with A SSH 'Honeypot'](https://www.robertputt.co.uk/learn-from-your-attackers-ssh-honeypot.html?utm_source=webopsweekly&utm_medium=email) tutorial Robert Putt [An In-Depth CentOS 7 Server Hardening Guide](https://www.lisenet.com/2017/centos-7-server-hardening-guide/?utm_source=webopsweekly&utm_medium=email) tutorial Tomas Nevar [Monitor a Raspberry Pi Cluster with Prometheus and Docker](https://blog.alexellis.io/prometheus-nodeexporter-rpi/?utm_source=webopsweekly&utm_medium=email) tutorial The Pi continues to be an interesting platform to learn ops practices on. Alex Ellis [A Rare Peek Inside a 400Gb/sec Cisco Network Chip](https://www.nextplatform.com/2017/09/14/rare-peek-inside-400g-cisco-network-chip/?utm_source=webopsweekly&utm_medium=email) story Timothy Prickett Morgan [How Facebook Does Rapid Releases At Massive Scale](https://code.facebook.com/posts/270314900139291/rapid-release-at-massive-scale/?utm_source=webopsweekly&utm_medium=email) story Facebook Code [Optionsbleed: HTTP OPTIONS Method Can Leak Apache's Server Memory](https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html?utm_source=webopsweekly&utm_medium=email) story Hanno Böck [Short-Lived Immutable Servers with Masterless Puppet](https://www.youtube.com/watch?v=yETgehoQmIs&utm_source=webopsweekly&utm_medium=email) video Neil Millard [PagerDuty CTO: How Much of 'Ops' Should Be Combined with 'Dev'?](https://thenewstack.io/pagerduty-cto-much-re-imagined-ops-combine-dev/?utm_source=webopsweekly&utm_medium=email) podcast The New Stack [Tools and Practices for Documenting Microservices](https://blog.codeship.com/documenting-microservices/?utm_source=webopsweekly&utm_medium=email) opinion Chris Ward [Why Docker Makes Sense for Startups](https://medium.freecodecamp.org/why-docker-makes-sense-for-startups-e9be14a1f662?utm_source=webopsweekly&utm_medium=email) opinion Docker is becoming the standard to develop and run containerized applications. Carlos Vega [$20 Free on a new Linode account](https://welcome.linode.com/webopsweekly/?utm_source=cooperpress&utm_medium=email&utm_term=webops-weekly&utm_campaign=webops-weekly-sponsored) tools Linux cloud hosting starting at 1GB of RAM for $5/mo. Use promo code WEBOPS20 and get $20 credit. Linode Cloud Hostingsponsored [dynsdjs: An Ultra Simple DNS Server Daemon Written in Node.js](https://github.com/dynsdjs/dynsdjs?utm_source=webopsweekly&utm_medium=email) code Julian Xhokaxhiu [Minideb: A Small Image Based On Debian Designed for Use in Containers](https://github.com/bitnami/minideb?utm_source=webopsweekly&utm_medium=email) code Bitnami [Argo: The Workflow Engine for Kubernetes](https://github.com/argoproj/argo?utm_source=webopsweekly&utm_medium=email) code An open source container-native workflow engine for developing and running apps on Kubernetes. Argo Project    [Read this issue on the Web](https://webopsweekly.com/issues/134) [See our archives](https://webopsweekly.com/issues) [Change your email address](*|UPDATE_PROFILE|*)  [Stop getting this newsletter](*|UNSUB|*)  

Published by [Cooperpress](https://cooperpress.com/)
Fairfield Enterprise Centre, Lincoln Way, Louth, LN11 0LS, UK