d-z-m

19 ms·

241.
by d-z-m 4y ago
Related: https://www.netfilter.org/documentation/HOWTO/netfilter-doub...
242.
by d-z-m 4y ago
A (perhaps) well-intentioned effort, but absolutely counter-productive to the causes that the proponents of changes like this are ostensibly in support of, namely "inclusivity", "social justice" and the like. I put them
243.
by d-z-m 4y ago
This page[0] seems to have some good information(on stdlib support at least). As far as file sizes go, you're right. It might be possible to get better results deploying a brotli'd or gzipped file instead[1]. [0]: https:/&#x
244.
by d-z-m 4y ago
> If you want replay protection it's probably sufficient to either remember used keys or add a timestamp. The replay Filippo is talking about is in the context of a single key. The remote side simply reads the nonce || message off
245.
by d-z-m 4y ago
As far as language support goes, it doesn't get much easier than working with TLS, especially in Go. As far as alternatives go, Noise Pipes[0] never took off, but feel like they'd be well suited to this task. [0]: https:/&#x
246.
by d-z-m 4y ago
> How is this relevant? Serving a JS application to a client is not like serving a JSON API. In some JS applications, the way the frontend code communicates with the backend is via JSON API endpoints. I believe GP was just pointing out t
247.
by d-z-m 4y ago
Last I heard WebAuthn didn't have access to hmac-secret or prf outside of a Chrome canary. Has this changed recently?
248.
by d-z-m 4y ago
If you're talking about sending these files around via email/messenger, most browsers treat localhost as a secure context, so this doesn't seem like that significant of a limitation. If you are serving out an encrypted HTML
249.
by d-z-m 4y ago
USA East Coast Mid-Atlantic, 500 errors for me.
250.
by d-z-m 4y ago
> Arguably a lot of things are not strongly protected per se but rely on specialists not trying to actively trick the system If a system has a vulnerability, it is the system's fault, not the specialist's. I'm a bit sensi
251.
by d-z-m 4y ago
Sniffing the SNI from the underlying TCP connection is the proper way to do this. a couple examples I know of(only know go ones of the top of my head): https://github.com/fabiolb/fabio/blob/master/proxy&#
252.
by d-z-m 4y ago
There _is_ no protection. the source is publicly accessible.
253.
by d-z-m 4y ago
> hell to play. not sure if this was a typo, but the phrase I'm familiar with is "hell to pay". https://dictionary.cambridge.org/us/dictionary/english/there...