5 ms·

How to setup a Handshake site with Caddy

46 points by NetOpWibby 5y ago

superkuh 5y ago
More London Trust Media Holdings corporate moves to try to monetize the FOSS properties he's bought (Private Internet Access, Linux Journal, freenode, snoonet). Handshake was/is an attempt to use Freenode to start a cryptocurrency to further enrich himself. But since the Freenode community didn't bite I guess they're casting a wider net now.
- rasengan 5y ago
  This statement made by superkuh is false in its entirety. 1. LJ - Bankrupted, 500K debt. LTMH paid off the debt in full and funded the operation for the next 2 years, before a much more well funded entity was able to take over - for free. Earnings: negative. Profit potential activity: 0. Funding: > 2m. 2. freenode - Reached out to LTMH for funding multiple times and LTMH always obliged. Earnings: negative. Profit potential activity: 0. Funding: > 1m. 3. Snoonet - Continues to run under its own policies. Earnings: negative. Profit potential activity: 0. Funding: > 50K. Other: Handshake is not an LTMH project. That being said, the Handshake project received 10m of funding and provided all of it to FOSS projects.
  - superkuh 5y ago
    If it isn't clear to anyone else, this commentor saying I am wrong is the owner of the corporation.
    - rasengan 5y ago
      Thanks for clarifying!
      - superkuh 5y ago
        No problem. Perhaps you can clarify something for me. Do you think being technically correct about LTMH not being involved matters when you yourself are leading it and PIA and the linux journal are involved in promoting it? https://www.linuxjournal.com/content/vcs-are-investing-big-new-cryptocurrency-introducing-handshake https://www.linuxjournal.com/content/vcs-are-investing-big-n... (https://archive.is/IK7w8 https://archive.is/IK7w8) >Just released, Handshake brings with it the much needed security and reliability on which we rely... The project and protocol has been led by Joseph Poon (creator of Bitcoin's Lightning Network), Andrew Lee (CEO of Purse), Andrew Lee (founder of Private Internet Access or PIA) and Christopher Jeffrey (CTO of Purse). Legal shell games work for legal issues. But we're all just humans here and it sure looks like you are running the show.
        rasengan 5y ago
        Thanks for the reply. I don't see how LJ, who commonly writes about DNS for example, writing about a DNS project handing 136m to the FOSS community with the help of the top VCs in Silicon Valley while moving ownership of the DNS root to the commons isn't a topic LJ would cover? As you can see many other publications covered this as well. In terms of the shell games comment, it's definitely true I have or had a stake in many of the entities you spoke of, thru LTMH. However, I was not in operational control. Case in point: On snoonet, I owned the cryptocurrency channel. However, I was deopped and removed from founder as the subreddit, /r/cryptocurrency/, claimed ownership over it. Snoonet's policies dictate that the owner of the subreddit owns the namespace on Snoonet. Any other questions that you have that you'd like me to help to try to clarify? Thanks again for your questions and comments!
- bdcravens 5y ago
  How is PIA a FOSS property?
judge2020 5y ago
> Yes, there is a blockchain involved but we're not going to get into that. Maybe provide a link to people interested in learning or wondering why the blockchain part might be concerning/daunting.
- ameliaquining 5y ago
  I don't know anything about this project, but blockchains are the only known technology that can let people globally register human-readable names without allowing any other party to tamper with them. So it's not surprising that one is used by an alternative DNS root project. The more concerning/daunting thing is trying to do an alternative DNS root at all.
  - buffrr 5y ago
    Creating an alternative or an extension to the DNS root is pretty ambitious. If they had chosen a TLD similar to .eth, .bit ... etc., it would have been more manageable, and they could've avoided issues with name collisions. However, there are some advantages to decentralizing trust in the root since there won't be a need for a root KSK[0] or a central entity that manages the root zone making DNSSEC + DANE more appealing even for existing TLDs. [0] https://www.cloudflare.com/dns/dnssec/root-signing-ceremony/ https://www.cloudflare.com/dns/dnssec/root-signing-ceremony/
    - NetOpWibby 5y ago
      Should ICANN open up ccTLDs, .eth is going to have a collision with Ethiopia. Whether Ethiopia is interested in operating a TLD is another story.
      - edwardtay 5y ago
        Ethiopia = .et
    - tptacek 5y ago
      The central KSK is a reason for normal users to dislike DNSSEC, but it's not why virtually nobody in the industry has deployed it, even though we're rapidly closing in on 3 decades of standardization effort for it. Handshake is a deeply silly idea; literally, the Internet analog of selling the Brooklyn Bridge.
francislavoie 5y ago
Do you really need light-ca? Caddy ships with smallstep, i.e. can act as its own CA, and can act as an ACME server for mTLS even. All you need to do is use "tls internal" (instead of specifying a cert/key), and if you want enable the ACME server, then you can use the "acme_server" directive https://caddyserver.com/docs/caddyfile/directives/acme_server https://caddyserver.com/docs/caddyfile/directives/acme_serve...
- NetOpWibby 5y ago
  I had no idea! Welp, TIL!
BoppreH 5y ago
I love Caddy (running my own personal page with it), and I think DNS is one of the few truly useful applications of blockchains. Unfortunately, Handshake is a blockchain that builds consensus via Proof-of-Work and the environmental impact cannot be ignored. The Handshakw FAQ[1] handwaves it away by saying that most of the energy probably comes from renewables and they hope it'll be almost all of it soon, but provides no sources for this critical assertion. [1]: https://handshake.org/faq/ https://handshake.org/faq/
dogecoinbase 5y ago
If you're curious about the Handshake project, this is basically all I needed to hear: they based their domain-claiming system on DNSSEC -- and when they launched they couldn't even claim their _own domain_ because .org was still signed with a RSASHA1-NSEC3-SHA1 key: https://github.com/handshake-org/hsd/issues/399 https://github.com/handshake-org/hsd/issues/399
- NetOpWibby 5y ago
  There's a massive gifting effort within the Handshake community and I'm pretty sure a community member owns it now. - http://handshake.hns.to http://handshake.hns.to
dadrian 5y ago
I don't understand how Handshake isn't fraud. They're "selling" ownership of domains that they don't own. ICANN owns the domains. It'd be like if I decided that I was going to replace US property records with a blockchain, and I began by reallocating 70% of the land in the United States to open-source developers.
- tasuki 5y ago
  ICANN is only operating a very limited number of TLDs. Handshake has reserved those for ICANN, and introduced many more TLDs to choose from.

46 points by NetOpWibby 5y ago

More London Trust Media Holdings corporate moves to try to monetize the FOSS properties he's bought (Private Internet Access, Linux Journal, freenode, snoonet). Handshake was/is an attempt to use Freenode to start a cryptocurrency to further enrich himself. But since the Freenode community didn't bite I guess they're casting a wider net now.

rasengan 5y ago
This statement made by superkuh is false in its entirety. 1. LJ - Bankrupted, 500K debt. LTMH paid off the debt in full and funded the operation for the next 2 years, before a much more well funded entity was able to take over - for free. Earnings: negative. Profit potential activity: 0. Funding: > 2m. 2. freenode - Reached out to LTMH for funding multiple times and LTMH always obliged. Earnings: negative. Profit potential activity: 0. Funding: > 1m. 3. Snoonet - Continues to run under its own policies. Earnings: negative. Profit potential activity: 0. Funding: > 50K. Other: Handshake is not an LTMH project. That being said, the Handshake project received 10m of funding and provided all of it to FOSS projects.
- superkuh 5y ago
  If it isn't clear to anyone else, this commentor saying I am wrong is the owner of the corporation.
  - rasengan 5y ago
    Thanks for clarifying!
    - superkuh 5y ago
      No problem. Perhaps you can clarify something for me. Do you think being technically correct about LTMH not being involved matters when you yourself are leading it and PIA and the linux journal are involved in promoting it? https://www.linuxjournal.com/content/vcs-are-investing-big-new-cryptocurrency-introducing-handshake https://www.linuxjournal.com/content/vcs-are-investing-big-n... (https://archive.is/IK7w8 https://archive.is/IK7w8) >Just released, Handshake brings with it the much needed security and reliability on which we rely... The project and protocol has been led by Joseph Poon (creator of Bitcoin's Lightning Network), Andrew Lee (CEO of Purse), Andrew Lee (founder of Private Internet Access or PIA) and Christopher Jeffrey (CTO of Purse). Legal shell games work for legal issues. But we're all just humans here and it sure looks like you are running the show.
      - rasengan 5y ago
        Thanks for the reply. I don't see how LJ, who commonly writes about DNS for example, writing about a DNS project handing 136m to the FOSS community with the help of the top VCs in Silicon Valley while moving ownership of the DNS root to the commons isn't a topic LJ would cover? As you can see many other publications covered this as well. In terms of the shell games comment, it's definitely true I have or had a stake in many of the entities you spoke of, thru LTMH. However, I was not in operational control. Case in point: On snoonet, I owned the cryptocurrency channel. However, I was deopped and removed from founder as the subreddit, /r/cryptocurrency/, claimed ownership over it. Snoonet's policies dictate that the owner of the subreddit owns the namespace on Snoonet. Any other questions that you have that you'd like me to help to try to clarify? Thanks again for your questions and comments!
bdcravens 5y ago
How is PIA a FOSS property?

judge2020 5y ago

> Yes, there is a blockchain involved but we're not going to get into that. Maybe provide a link to people interested in learning or wondering why the blockchain part might be concerning/daunting.

ameliaquining 5y ago
I don't know anything about this project, but blockchains are the only known technology that can let people globally register human-readable names without allowing any other party to tamper with them. So it's not surprising that one is used by an alternative DNS root project. The more concerning/daunting thing is trying to do an alternative DNS root at all.
- buffrr 5y ago
  Creating an alternative or an extension to the DNS root is pretty ambitious. If they had chosen a TLD similar to .eth, .bit ... etc., it would have been more manageable, and they could've avoided issues with name collisions. However, there are some advantages to decentralizing trust in the root since there won't be a need for a root KSK[0] or a central entity that manages the root zone making DNSSEC + DANE more appealing even for existing TLDs. [0] https://www.cloudflare.com/dns/dnssec/root-signing-ceremony/ https://www.cloudflare.com/dns/dnssec/root-signing-ceremony/
  - NetOpWibby 5y ago
    Should ICANN open up ccTLDs, .eth is going to have a collision with Ethiopia. Whether Ethiopia is interested in operating a TLD is another story.
    - edwardtay 5y ago
      Ethiopia = .et
  - tptacek 5y ago
    The central KSK is a reason for normal users to dislike DNSSEC, but it's not why virtually nobody in the industry has deployed it, even though we're rapidly closing in on 3 decades of standardization effort for it. Handshake is a deeply silly idea; literally, the Internet analog of selling the Brooklyn Bridge.

francislavoie 5y ago

Do you really need light-ca? Caddy ships with smallstep, i.e. can act as its own CA, and can act as an ACME server for mTLS even. All you need to do is use "tls internal" (instead of specifying a cert/key), and if you want enable the ACME server, then you can use the "acme_server" directive https://caddyserver.com/docs/caddyfile/directives/acme_server https://caddyserver.com/docs/caddyfile/directives/acme_serve...

NetOpWibby 5y ago
I had no idea! Welp, TIL!

BoppreH 5y ago

I love Caddy (running my own personal page with it), and I think DNS is one of the few truly useful applications of blockchains. Unfortunately, Handshake is a blockchain that builds consensus via Proof-of-Work and the environmental impact cannot be ignored. The Handshakw FAQ[1] handwaves it away by saying that most of the energy probably comes from renewables and they hope it'll be almost all of it soon, but provides no sources for this critical assertion. [1]: https://handshake.org/faq/ https://handshake.org/faq/

dogecoinbase 5y ago

If you're curious about the Handshake project, this is basically all I needed to hear: they based their domain-claiming system on DNSSEC -- and when they launched they couldn't even claim their _own domain_ because .org was still signed with a RSASHA1-NSEC3-SHA1 key: https://github.com/handshake-org/hsd/issues/399 https://github.com/handshake-org/hsd/issues/399

NetOpWibby 5y ago
There's a massive gifting effort within the Handshake community and I'm pretty sure a community member owns it now. - http://handshake.hns.to http://handshake.hns.to

dadrian 5y ago

I don't understand how Handshake isn't fraud. They're "selling" ownership of domains that they don't own. ICANN owns the domains. It'd be like if I decided that I was going to replace US property records with a blockchain, and I began by reallocating 70% of the land in the United States to open-source developers.

tasuki 5y ago
ICANN is only operating a very limited number of TLDs. Handshake has reserved those for ICANN, and introduced many more TLDs to choose from.