cpach

8 ms·

211.
RFC 9773: Acme Renewal Information (ARI) Extension(datatracker.ietf.org)
2 points by cpach 1y ago|0 comments
212.
by cpach 1y ago
What do you mean by “tool”? Do you mean IDE/editor, or something else?
213.
by cpach 1y ago
Not a *BSD user myself, but have you considered FreeBSD or NetBSD? I would wager they have more friendly communities. Apart from the official homepages, this might be a useful starting point: https://www.unitedbsd.com/ Best
214.
by cpach 1y ago
Is it really X.509 that is the big “problem”? If so, I fail to see how.
215.
by cpach 1y ago
And quite soon, 1-year certs will not be available from any vendor at all: https://news.ycombinator.com/item?id=44643826
216.
by cpach 1y ago
Either that, or use an ACME client that has support for ARI so that the CA can signal to the client when it’s time to renew. https://letsencrypt.org/2024/04/25/guide-to-integrating-ari-...
217.
by cpach 1y ago
Perhaps you know this already but in the future, certs issued by a “real” CA will not be allowed to live for more than 47 days. https://www.digicert.com/blog/tls-certificate-lifetimes-will...
218.
by cpach 1y ago
Most comments seem to be over here: https://news.ycombinator.com/item?id=44641117
219.
by cpach 1y ago
I wonder this too. The ones I’ve tried so far didn’t work well.
220.
by cpach 1y ago
Neat!
221.
by cpach 1y ago
Ok.
222.
by cpach 1y ago
I wonder if the face icons where intended for the X-Face header. https://en.wikipedia.org/wiki/X-Face
223.
by cpach 1y ago
Very cool project!
224.
by cpach 1y ago
Account registration is done by sending a public key to a certain API endpoint. The key will become associated with an account URL that looks like this: https://acme-v02.api.letsencrypt.org/acme/acct/4277968575
225.
by cpach 1y ago
Good idea. In Firefox, one could have a separate profile for this, so that the CA cert is not imported in one’s general profile. Another option could be to put the cameras behind a reverse proxy (e.g. Nginx or Envoy) and terminate TLS there
226.
by cpach 1y ago
I don’t believe that makes sense in the context of certificates generated by a public CA. Unlike domain names, there’s not one owner of 10.10.10.10, there are millions of “owners”… But what problem is it that you want to solve? For local
227.
by cpach 1y ago
This is totally off-topic. With all respect, if you want to discuss email encryption I would suggest that you write a blog post or start a separate thread.
228.
by cpach 1y ago
But these are public certificates. Most personal computers are behind NAT, i.e. they lack a public IP address.
229.
by cpach 1y ago
Interesting. Where did Yarvin reply?
230.
by cpach 1y ago
Love this post. Reminds me of my former coworker G. He had exactly this attitude, and it made it possible for him to deliver results on most tasks that he set out for.
231.
by cpach 1y ago
Have you tried Windsurf or Cursor? If not, you might want to give it a shot.
232.
by cpach 1y ago
Regarding your last paragraph: Isn’t that pretty much solved thanks to HSTS preload? A non-technical author of a small recipe blog might not know how to set it up, but a bank ought to have staff (and auditors) who takes care of stuff like t
233.
by cpach 1y ago
'tptacek has written about this earlier on HN. See https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu... For comparison, see also the section named Password handling in Cryptographic Right Answ
234.
by cpach 1y ago
Not all hype is just hot air. Case in point: WWW and the “dot com” bubble. Dot com was a bubble, but the WWW (and Internet) was a big thing that transformed all major societies. It survived the bust that followed after the boom. Are LLM
235.
Exhumation and Reburial of Richard III of England(en.wikipedia.org)
1 points by cpach 1y ago|0 comments
236.
by cpach 1y ago
For me, the most important part would be to import my dotfiles/custom scripts via chezmoi. And installing Homebrew. The rest (e.g. install Firefox) I would probably do manually.
237.
by cpach 1y ago
I can see how this can be true for commercial products. Would you say it also applies to open source projects?
238.
by cpach 1y ago
I’m not sure I follow. What is the use-case for an “AI conversation partner”? Does it do something else than what ChatGPT already does?
239.
by cpach 1y ago
Would it really be worth the effort? When this level of complexity is reached, I personally think it’s better to use a more capable language, such as Python or Ruby.
240.
by cpach 1y ago
Are your other tools/languages perfect or imperfect?

More ›