4 ms·
She really complains how ACME is bad because a client implementation has code written in lines sometimes exceeding 200 characters..? How about we stop trying t
by 9dev 4y ago
She really complains how ACME is bad because a client implementation has code written in lines sometimes exceeding 200 characters..?
How about we stop trying to micromanage essential services on our servers, and just get on with literally anything else that brings actual value? Let’s encrypt works, it works without attention, it’s free, and ubiquitous.
- joe-collins 4y agoWhatever technical merit the rest of the rant may have had, screaming that long lines killed puppies certainly burned a lot of provisional credibility.
- sourcecodeplz 4y agoIt doesn't work for me, on one of my older phones.
- xcjs 4y agoIf so, that's by design in a way. That's an indicator that your root level certs are not being maintained or updated. That risk is worse than just a few certificate authorities not being recognized.
- sigmoid10 4y ago>Let’s encrypt works, it works without attention, it’s free, and ubiquitous. It's not so easy, since there is always a tradeoff with these things. The exact same argument could be applied to Java as a backend and many people happily do so... until it turns out that some lone guy in Switzerland, who has thanklessly maintained a highly popular logging library for the last 20 years, forgot to sanitise certain inputs. Aaaand now you have remote code execution on Apple's servers and just about every other Fortune 500 company. The world needs more people who scrutinise widely used security relevant software, not less.
- KMnO4 4y agoThe inevitable folly of an engineer is succumbing to that nagging desire to tear down the existing solutions and build your own.