SahAssar

55 ms·

841.
by SahAssar 3y ago
Huh. curl https://jakearchibald.com/2023/against-self-closing-tags-in-html/ -v > /dev/null gave me: > GET /2023/against-self-closing-tags-in-html/ HTTP/2 > Host: j
842.
by SahAssar 3y ago
Send no Accept-Encoding leads to an uncompessed response, so I don't think that is the parents issue.
843.
by SahAssar 3y ago
What do you mean?! The HTML standard is very consistent across browsers these days, while JSX is not an actual standard for how to format documents, its just an alternate interface to write JS expressions.
844.
by SahAssar 3y ago
How would that have avoided left-pad? Do you just mean that people would have been discouraged from pulling in so many dependencies?
845.
by SahAssar 3y ago
That means it is more like federated control IMO.
846.
by SahAssar 3y ago
CloudFlare never looked like neutral infra, since they control the traffic so they need to (from a legal standpoint at least) block certain things. There has always been things cloudflare would not host. CA:s do not control the traffic, the
847.
by SahAssar 3y ago
I've implemented https for IoT devices in a similar way that plex did it. Basically every device got a cert for *.$MAC_ADDRESS.myiot.com and then the DNS for myiot.com would essentially bounce back 192_168_10_10.$MAC_ADDRESS.myiot.com
848.
by SahAssar 3y ago
> central control What central control? Your browser uses a trust store and there are multiple independent (but collaborating) groups that decide what CA:s to trust. The rest of your supposed drawbacks seem like they would be the same in
849.
by SahAssar 3y ago
Those are not proprietary and have multiple independent implementations and are supported by all major servers and clients.
850.
by SahAssar 3y ago
Do you have a source? Some quick searching only brought up cloudflare dropping them.
851.
by SahAssar 3y ago
> This is why a lot of American centric sites block us from accessing them, they want your data, and they don't want to ask for it. Also, requiring it when it is not technically required for the product is illegal. So even throwing
852.
by SahAssar 3y ago
Do you have any info page for how you implement stuff like funnels, journeys, etc. without storing any PII? Also this paragraph from your GDPR page had me scratching my head a bit: > Usermaven agrees to abide by the standard contractual
853.
by SahAssar 3y ago
Not in any "normal" use-case, no. It'd make sense to make this behavior opt-in, like having a `allow_parent_traversal on;` flag in the location.
854.
by SahAssar 3y ago
> (you can still do like `import('foo' + someVar)` which will only invoke dynamically at runtime, so I'm not sure how that case is dealt with) That case is dealt with more like a `fetch('foo' + someVar).then(r =&
855.
by SahAssar 3y ago
> 3 times faster pageload is a significant UX difference. Going from 3s to 1s would be significant. Going from 200ms to 67ms wouldn't be very significant. There are very diminishing UX returns when going below ~300ms.
856.
by SahAssar 3y ago
Notion is very sluggish and feels very unlike a markdown file-based system to me.
857.
by SahAssar 3y ago
To be clear: Vlang overpromised and underdelivered on many features. It also included features by shelling out to other executables like curl. It might have all been fixed by now, but it is a fact that Vlang has had listed many, many, featu
858.
by SahAssar 3y ago
Are those devs not ever collaborating with non-tech people on documents? Also when you say wiki, do you mean a mediawiki instance or the ones included in things like github?
859.
by SahAssar 3y ago
"people who know what Markdown is" overlaps very much with "people who have to use google docs for work but would prefer a consistent editing experience". Basically every dev I know has to use either teams/sharepoin
860.
by SahAssar 3y ago
The "But why?" section does not mention why not just use cloud-init?
861.
by SahAssar 3y ago
That is not globally enforced.
862.
by SahAssar 3y ago
That was not the point you made in the original post. You said > Besides that, you can't get HTTPS for these domains (without the mess of a custom CA and even then you'll run into CT issues) so development doesn't even ref
863.
by SahAssar 3y ago
> Besides that, you can't get HTTPS for these domains (without the mess of a custom CA and even then you'll run into CT issues) Of course you can, you just cant use HTTP validation for it. Use DNS validation and it works fine.
864.
by SahAssar 3y ago
Gotcha, I tend to think of openresty as more of an nginx-based-application-platform than just as nginx.
865.
by SahAssar 3y ago
> That reduces the security surface area to CSRF, securing cookies and session expiry How do you keep the user logged in? Do you just keep a token in-memory on your frontend app?
866.
by SahAssar 3y ago
> With both Apache and Nginx you can let the web server do all the OpenID Connect work for you for paths you specify. Seems like at least the official nginx solution for this requires their paid subscription: https://github.co
867.
by SahAssar 3y ago
Hey, I tried to contact you (via twitter since I couldn't find an email) about if you would be interested in doing a talk at öredev about ladybird a few months back. I assume the lack of a reply meant you weren't interested, but i
868.
by SahAssar 3y ago
Yes. I refuse to use native apps when the functionality can be as good in a web app. Things like chat, email, watching videos, listening to music, etc. A lot of the time the "native" app is using electron anyway, so why go through
869.
by SahAssar 3y ago
You're conflating complex and hard. Cloud functions might be easy, but they are also complex, and there are definitely specifics you need to keep in mind when developing them.
870.
by SahAssar 3y ago
I hadn't heard of the “Business Source License”, but reading it makes it seem pretty scary. Basically any usage of the software that could be considered production is prohibited, which probably could even mean personal usage in a non-d

More ›