jaas

40 ms·

151.
by jaas 7y ago
You can search the list here: https://www.treasury.gov/resource-center/sanctions/sdn-list/... Some entries have specific domains associated with them, but we are obligated to not serve any domain directly ass
152.
by jaas 7y ago
Just so people don't get an oversimplified view of what it takes to start a CA from this comment, you will have much bigger challenges than access to application software. Your first issue will be securing millions of dollars per year
153.
by jaas 7y ago
Yes we do. On what basis did you make that statement? We comply with U.S. sanctions by not issuing to entities on the SDN list, but that doesn't prevent us from serving the vast majority of people in those countries.
154.
by jaas 7y ago
If you want to read more about this kind of thing, I can highly recommend this book: The Death and Life of the Great Lakes by Dan Egan It's incredibly well researched and written, and gave me a much better understanding of what's
155.
by jaas 7y ago
You stated that it wasn't a problem before they were free: "I don't think money was ever the big deal in the real world that IETF people thought it was, but it sure drove a lot of dumb mailing list posts" I am pointing o
156.
by jaas 7y ago
I have a relative who has been repeatedly arrested for drunk driving. He had already severely injured someone and will kill someone sooner or later. The courts do nothing, he walks free with his driver's license every time. Even walked
157.
by jaas 7y ago
Money is a big deal for ease-of-use and access. Tracking down a credit card and the necessary approvals to use it, even if the amount of money is no big deal, is a lot of friction for many people. Could be corporate red tape, could be that
158.
by jaas 7y ago
"Unix was never a good design" Nothing's perfect. Unix was a great design that served its purpose well for a long time, and evolved a bit along the way. Saying it was "never good" is trivializing and, in my opinion,
159.
by jaas 7y ago
Let's Encrypt | Site Reliability Engineer | Remote, U.S. and Canada You will be a member of a six-person Site Reliability Engineering (SRE) team responsible for maintaining and evolving the operational infrastructure for the Let’s Encr
160.
by jaas 7y ago
Head of Let's Encrypt here. So far as we can tell, there is no viable plan for mass adoption of S/MIME. It will remain a niche system whether or not we participate. There is no opportunity for impact that would justify the effort
161.
by jaas 7y ago
And ISRG is the non-profit legal entity behind Let's Encrypt: https://www.abetterinternet.org/
162.
by jaas 8y ago
Let's Encrypt | Site Reliability Engineer | Remote, U.S. and Canada You will be a member of a six-person Site Reliability Engineering (SRE) team responsible for maintaining and evolving the operational infrastructure for the Let’s Encr
163.
by jaas 8y ago
EJBCA is popular but it's hardly a monoculture, especially among the larger CAs that can afford to do their own thing. Let's Encrypt doesn't use it, and I'm pretty sure a significant number of the other bigger CAs don&#x
164.
The ACME Protocol is an IETF Standard(letsencrypt.org)
29 points by jaas 8y ago|1 comments
165.
by jaas 8y ago
Forward secrecy is always useful for two endpoints that want to have a secure exchange of messages. It's a core component of secure transport these days. It's not "useful" if your goal is to intercept and decrypt message
166.
by jaas 8y ago
Why do you want it to be a thing? Have you ever been exposed to an attack that would have been prevented by DNSSEC? I feel like most people who want DNSSEC just have very theoretical warm feelings about the idea of it. When they actually im
167.
by jaas 8y ago
DNSSEC doesn't help when the attacker controls your DNS control panel, just like DNSSEC doesn't help in almost every other practical attack scenario. Let's kill it off and focus on efforts that solve real problems. It's
168.
by jaas 8y ago
Let's Encrypt is the name of a service, ISRG is the non-profit legal entity that provides the service. ISRG was created in 2013 to be the legal entity behind the Let's Encrypt service. It's not being "spun out," we
169.
by jaas 8y ago
The third sentence means it is standard practice to validate from only a single network perspective today. I have heard we would not be the first CA to do multi-perspective validation, but as far as I know we would be the only CA of signifi
170.
Let's Encrypt: Looking Forward to 2019(letsencrypt.org)
408 points by jaas 8y ago|68 comments
171.
by jaas 8y ago
What you are saying about how Minneapolis currently works is true, but the car-dominated commuter culture is an unfortunate situation that will not change unless Minneapolis changes the incentive structures that made it this way. Minneapoli
172.
Meet Radiant Award Recipient Jason Donenfeld(abetterinternet.org)
7 points by jaas 8y ago|0 comments
173.
by jaas 8y ago
AMD delivered completed physical GPU components to Intel, which Intel then stuck next to their CPUs. They didn't give Intel anything Intel couldn't get by walking over to MicroCenter. (So far as I know anyway)
174.
by jaas 8y ago
Lots of companies get older and lose ability to execute. AMD was very old already when Opteron happened. The age of the company in a case like this is irrelevant. What matters is current management and staff and market context.
175.
by jaas 8y ago
Let's Encrypt | Director of Site Reliability Engineering | United States or Canada | REMOTE Let’s Encrypt is a free, automated, and open Certificate Authority. You will lead a relatively experienced six-person team responsible for main
176.
by jaas 8y ago
This comment doesn't add anything that isn't explained in the article more than once by Acton himself.
177.
by jaas 8y ago
I disagree, though that was certainly a big factor, particularly in speeding up the pace of user loss. In any case, it's probably not a healthy perspective for Mozilla or its community to just write this off as Firefox being the victim
178.
by jaas 8y ago
"Perhaps Mozilla's biggest blunder was its decision to add support for the closed-source DRM W3C standard Encrypted Media Extensions (EME) in Firefox." It's hard to imagine a perspective from which this is true that isn&
179.
by jaas 8y ago
The Firefox bookmarking implementation is unnecessarily complicated and I'm guessing very few features are actually used. It's a maintenance burden, I'm not surprised they want to slim it down. To give you an example of a mai
180.
by jaas 8y ago
You can limit that by deploying CAA records for your domain in DNS. All trusted CAs are required to respect those records.

More ›