Conversation

Notices

1. Embed this notice
   josh (josh@poa.st)'s status on Wednesday, 01-Feb-2023 14:14:42 JST josh
   Okay retards (web developers), here's a question: What HTTP code should be used for interstitial pages on DDoS guards?
   
   See: en.wikipedia.org/wiki/List_of_HTTP_status_codes
   
   Cloudflare at some point switched to 503 which I hate. It's incorrect. I am considering using 511 (the code for things like WiFi Terms of Service pages).
   
   It's an interestingly unanswered question considering how the HTTP status code RFC is notoriously bloated (see 418 I am a Teapot). And, additionally, Cloudflare is working with Apple to make a new kind of anonymous and instant captcha that involves using your device ID.
   • Alex Gleason likes this.
   • Embed this notice
     CatboyCumDump :blacklight: (catboycumdump@poa.st)'s status on Wednesday, 01-Feb-2023 14:14:52 JST CatboyCumDump :blacklight:

     in reply to
     @josh use 418 until you figure it out
     Alex Gleason likes this.
   • Embed this notice
     Alex Gleason (alex@gleasonator.com)'s status on Wednesday, 01-Feb-2023 14:17:44 JST Alex Gleason

     in reply to

     • Boyka

     @Boyka @josh I don’t have any strong feelings about what’s semantically “correct”, but I would probably copy what Cloudflare is doing for the sake of compatibility. That’s the Fediverse dev mindset.

   • Embed this notice
     Boyka (boyka@poa.st)'s status on Wednesday, 01-Feb-2023 14:17:46 JST Boyka

     in reply to

     • Alex Gleason
     @josh @alex
   • Embed this notice
     Alex Gleason (alex@gleasonator.com)'s status on Wednesday, 01-Feb-2023 14:19:20 JST Alex Gleason

     in reply to

     • Alex Gleason
     • Boyka

     @Boyka @josh 503 makes sense because if you’re a human you don’t care about the HTTP status code. But if you’re a bot, you’re not getting past that page. So “service unavailable” actually does make perfect sense.

   • Embed this notice
     Neko McCatface v2023 :verified::makemeneko: (roboneko@bae.st)'s status on Wednesday, 01-Feb-2023 15:30:15 JST Neko McCatface v2023 :verified::makemeneko:

     in reply to

     • Alex Gleason
     • Boyka
     @alex @Boyka @josh I don't think "service unavailable" makes sense here because in fact the service _is_ available but access is being denied for whatever reason
     
     "403 forbidden" seems clear enough to me
     
     "450 Blocked by Windows Parental Controls" would be amusing
     
     of course the page should just clearly state "we think you're a bot" in plain english and at that point it's all sort of irrelevant
     
     in fact you might just return 200 and a static page that explains what's going on
     Alex Gleason likes this.