cpach

6 ms·

61.
by cpach 6mo ago
I vastly prefer Mac over Windows, but I think you have a good point. This is definitely one area where Microsoft found a more reasonable solution.
62.
by cpach 7mo ago
https://archive.ph/NtVHd
63.
by cpach 7mo ago
Main thread here: https://news.ycombinator.com/item?id=47449498
64.
by cpach 7mo ago
Main thread here: https://news.ycombinator.com/item?id=47449498
65.
by cpach 7mo ago
Software. Music.
66.
by cpach 7mo ago
“GPL is toxic for embedded commercial software” Why is that?
67.
IBM looks beyond short-term AI gains, tripling entry-level hiring(cio.com)
3 points by cpach 7mo ago|0 comments
68.
by cpach 8mo ago
If you see an account that you suspect is a spambot, please send an email to hn@ycombinator.com, then the mods can take action.
69.
by cpach 8mo ago
Are you sure you understood the comment you replied to? I agree that 2>&1 is not complex. But I think I speak for many Bash users when I say that this idiom looks bad, is hard to Google, hard to read and hard to memorize.
70.
by cpach 8mo ago
I was I heavy XMPP user back in the 00s. But on the whole it never really took off, and when Google killed XMPP support in their chat it was a severe blow. As for why it didn’t reach a larger userbase, I think the reasons that Moxie describ
71.
by cpach 8mo ago
No, I don’t think so? The .git folder will likely contain the URL to the repo, but not any credentials.
72.
by cpach 8mo ago
Guess I’ll stop using Messenger…
73.
by cpach 8mo ago
Does anyone have any details regarding the deprecation? I wonder why Apple made this decision.
74.
by cpach 8mo ago
The ones who monitor their domains in the CT log. (Mom-and-pop-stores probably won’t. Other orgs might.)
75.
by cpach 8mo ago
The one I’ve heard of is Igalia https://www.igalia.com/
76.
by cpach 8mo ago
Are you on the Netbird dev team? :)
77.
by cpach 8mo ago
AFAICT you and 'ysleepy are in agreement.
78.
by cpach 9mo ago
Very cool project!
79.
by cpach 9mo ago
There is a solution for smoothing out the traffic: RFC 9733, ACME Renewal Information (ARI) Extension https://datatracker.ietf.org/doc/rfc9773/
80.
by cpach 9mo ago
If I would use short-lived certs I would make sure to choose an ACME client that has support for ARI (ACME Renewal Information). Then the CA will tell the client when it’s time to renew.
81.
by cpach 9mo ago
There’s also the DNS-01 challenge that works well for devices on private networks.
82.
by cpach 9mo ago
It’s capped to 15 years. In another comment someone linked to a document from the Chrome team. Here’s a quote that I found interesting: “In Chrome Root Program Policy 1.5, we landed changes that set a maximum ‘term-limit’ (i.e., period of
83.
by cpach 9mo ago
Remember that there are lots of CAs, and quite many of them are based outside of the US. Those CAs currently do not offer ACME services for free, but there’s nothing stopping them from doing so. I would say that the WebPKI system seems to
84.
by cpach 9mo ago
Not sure what the exact concern is here. So far, virtually all countries on Earth are still represented in DNS. Venezuela, Iran, Somalia, etc etc. You can also read a lot of anti-Trump articles and comments on countless web-sites, some unde
85.
by cpach 9mo ago
Would be cool. But since they’re a non-profit, they would need some way to make it scalable.
86.
by cpach 9mo ago
Haven’t seen any such system that scales to billions of user.
87.
by cpach 9mo ago
Then you might as well get rid of TLS altogether.
88.
by cpach 9mo ago
People have tried. Revocation is a very hard problem to solve on this scale.
89.
by cpach 9mo ago
That’s not relevant though. These CAs will gladly give you a .se/.dk/.in/whatever cert as long as validation passes.
90.
by cpach 9mo ago
It seems that currently most free CAs have a big presence in the US, and employ quite a few US employees. ZeroSSL/HID Global seems to be quite multi-national though, and it’s owned by a Swedish company (Assa Abloy). I don’t know what w

More ›