Is it just me, or has the site's been down frequently after the new release? I haven't been able to read articles on ponyfoo.com for a couple of days now (until just now while writing this message).
That makes sense if it keeps the connection open. It just seemed weird that you'd still have to include the certificates in both, the load balancer and your Node app as well.
A really good question at the end of the article: Why not terminate SPDY at the load balancer and just communicate via HTTP to the Node.js servers?
Technically you're handling the SPDY in two places and you're slowing down the protocol by having to re-interpret it twice? What's the reasoning/requirement for this?
Note: I'm not claiming that it is the wrong way to do this, because I'm not that familiar with SPDY in general, but I am familiar with SSL and you'd never implement that in two places if you already terminate the SSL in the loadbalancer.
A few pointers about this topic:
1) You should never EVER use eval for anything, unless you REALLY know what you're doing and there's no other way.
2) IF you really need to use eval, always wrap it in a try-catch statement to avoid your whole app breaking from a simple parse error.
3) The JSON library is nowadays inbuilt in all modern, and even older browsers. Starting from IE8, the browsers provide a native JSON implementation that you can safely use, so requiring the Crockford's JSON library is really not required, unless you need to support some really old browsers.
4) Even when you're using the JSON library for parsing JavaScript, you should always put it inside a try-catch statement, because there's a chance that it will throw a parse error in case of malformed data.
Great article and reflects really well how I feel about the Matasano Security's article about JavaScript cryptography.. that article keeps popping it's head up all the time, even though it's outdated and more provocative than factual.
254.28MB...
Looking at the contents of that package, they don't have any idea how to structure and/or package an open source library. You need a Visual Studio to bundle that? MS please...