ekr____

8 ms·

91.
by ekr____ 9mo ago
Running improvement isn't actually like this, except for beginners. First, you actually do quite a bit of periodization at the season level, so you might have a long base block, followed by a more stamina/quality oriented block, t
92.
by ekr____ 9mo ago
Right. Basically, beginners in any sport are naive to effectively all training stimuli, and so they will respond to a wide variety of inputs. Once you get adapted it gets harder and harder to find new stimuli that will trigger new adaptatio
93.
by ekr____ 9mo ago
This is actually true for many forms of physical training, including not just strength training but also endurance training (running, etc.) Plateaus and injuries aside, the basic principle of training is overload followed by recovery, and i
94.
by ekr____ 10mo ago
Well, for some value of "just works". For example, I recently attended the IETF meeting in Montreal--practically the epicenter of v6 thinking--which offers a by default v6-only network. My Mac worked fine, but my son's school
95.
by ekr____ 10mo ago
Well, for some value of "just works". For example, I recently attended the IETF meeting in Montreal, which offers a by default v6-only network. My Mac worked fine, but my son's school-issued Chromebook had glitchy behavior un
96.
by ekr____ 10mo ago
> lol. I didn't ask for SKUs, I asked for plugins. I wouldn't mind the dev tools, and PDF viewer being plugins too. Again, include those plugins in the default download, just let me have a download that doesn't include the
97.
by ekr____ 10mo ago
> Why should I be required to download and ignore your translation feature, when I could just as easily not have it included in the first place? This seems like special pleading. The browser (and any software package) is full of features
98.
by ekr____ 10mo ago
> Their usage share is a statistical error, and most of it comes from being shipped with Ubuntu. This is not true, and is easily verifiable for yourself. https://data.firefox.com/dashboard/hardware The vast majorit
99.
by ekr____ 10mo ago
Ugh. Because they also say: "Two other forms of advanced configuration allow even further customization: about:config preference modifications and userChrome.css or userContent.css custom style rules. However, Mozilla highly recommends
100.
by ekr____ 10mo ago
PSA (for the nth time): about:config is not a supported way of configuring Firefox, so if you tweak features with about:config, don't be surprised if those tweaks stop working without warning.
101.
by ekr____ 10mo ago
FWIW, Firefox already has AI-based translation using local models.
102.
by ekr____ 10mo ago
https://www.mozilla.org/en-US/about/leadership/#anthony-enzo...
103.
by ekr____ 10mo ago
Mozilla does have a revocation mechanism that actually works. https://hacks.mozilla.org/2025/08/crlite-fast-private-and-co...
104.
by ekr____ 10mo ago
> "domain.xyz can request non-wildcard certs for up to 10 days validity"? You could be proposing two things here: (1) Something like CAA that told CAs how to behave. (2) Some set of constraints that would be enforced at the cli
105.
by ekr____ 10mo ago
To the best of my knowledge the answer to "2" is no.
106.
by ekr____ 10mo ago
Basically OCSP stapling (more specifically must-staple) is isomorphic to short-lived certificates.
107.
by ekr____ 10mo ago
I fear this reflects two misunderstandings. First, one of the purposes of shorter certificates is to make revocation easier in the case of misissuance. Just having certificates issued to you be shorter-lived doesn't address this, becau
108.
by ekr____ 10mo ago
Sure, but the subdomains will be duplicated for the same reasons.
109.
by ekr____ 10mo ago
With that said, given that (1) pre-certificates in the log are big and (2) lifetimes are shortening and so there will be a lot of duplicates, it seems like it would be good for someone to make a feed that was just new domain names.
110.
by ekr____ 10mo ago
We actually spent some time making sure that we weren't going to run into problems with browsers. However, as the OP points out, because LE had a cross-signature from an existing CA, browsers didn't have to any positive action to
111.
by ekr____ 10mo ago
In what way do MITM certificates "improve Internet usability for their citizens"?
112.
by ekr____ 10mo ago
A lot of this is covered in the Let's Encrypt retrospective paper from 2019: https://www.abetterinternet.org/documents/letsencryptCCS2019... . From Section 3.1. "Let’s Encrypt was created through the merging o
113.
by ekr____ 10mo ago
What's the incentive for individual sites or browsers to do this? From the site's perspective, they're going to need to have a WebPKI certificate for the foreseeable future, basically until there is no appreciable population
114.
by ekr____ 10mo ago
This isn't correct. There are two authentication properties that one might be interested in: 1. The binding of some real world identity (e.g., "Google") to the domain name ("google.com). 2. The binding of the domain name
115.
by ekr____ 10mo ago
I agree that technical guarantees are better than policy guarantees.
116.
by ekr____ 10mo ago
The order of events is a bit more complicated than this. Google initially proposed restricting powerful features to secure origins back in February of 2015 ( https://web.archive.org/web/20150125103531/https:/&#
117.
by ekr____ 10mo ago
It's never been clear to me what the rationale for OV was, as the UI wasn't even different like EV was.
118.
by ekr____ 10mo ago
Can you elaborate a bit about what you mean by "the blessing of a CA"? I agree that it's true that you need a certificate to do TLS, but importantly Let's Encrypt isn't interested in what you do with your certificat
119.
by ekr____ 11mo ago
> It is however a document scoped so it cannot be expanded to include either of those things. Work to define interoperable use of other algorithms, including hybrid algorithms, would be in other documents. FYI, the specification for hybr
120.
by ekr____ 11mo ago
The situation is actually somewhat the opposite here: the code points for these algorithms have already been assigned (go to https://www.iana.org/assignments/tls-parameters/tls-paramete... and search for draft-con

More ›