mholt

54 ms·

751.
by mholt 5y ago
Caddy has always been open source, Apache licensed.
752.
by mholt 5y ago
Francis has implemented your suggestions
753.
by mholt 5y ago
Thanks for your feedback. Docker does make easy things hard. (And yes, I know, sometimes it makes hard things easy.) > I think the getting started config would be much better if it showed the 5-10 things that most people would expect t
754.
by mholt 5y ago
This can be automated with DNS provider modules, if someone would like to implement it: https://github.com/caddy-dns
755.
by mholt 5y ago
Currently, Caddy will automatically fail over to ZeroSSL if it can't get a cert from Let's Encrypt. (You can even configure other sources in addition to, or instead of, LE and ZeroSSL. For example, you could have it fall back to a
756.
by mholt 5y ago
Caddy has had a robust stapling implementation for years.
757.
by mholt 5y ago
Caddy does OCSP stapling + caching reliably (and has for years). It will even auto-renew your certificate if it gets an OCSP response of "Revoked".
758.
by mholt 5y ago
Yep, I kind of wish browser permissions let you gate access to the network just like they do the camera, mic, location, etc. (Though, network permission would probably need to be enabled by default to not break the Web.)
759.
by mholt 5y ago
> Wouldn't clients then only become aware that they need to replace their certs after they've been revoked? A certificate that is going to be revoked is as good as revoked. There is no "almost untrusted, but not quite yet&
760.
by mholt 5y ago
Not if the last valid OCSP response is stapled to the certificate. Of course, clients can ignore that and use their own revocation lists/logic, which sometimes get pushed faster than OCSP responses. (Or clients can just block any certi
761.
by mholt 5y ago
OCSP is stapled automatically by Caddy, for example. It gets refreshed halfway through the response's validity period, so it will know well ahead of time if a certificate is revoked, allowing it to replace the certificate for you autom
762.
by mholt 5y ago
> Running certbot daily will currently do nothing. It won't think that the certificate needs to be replaced since it has not yet reached the limit required to renew. Yep, this. Clients need to be built to support it. I know this is
763.
by mholt 5y ago
Is there an app which can show you this kind of map in real-time as you move?
764.
by mholt 5y ago
Hey HN, this is our first stable release of the year, with a ton of improvements and some really cool new features: secure, remote admin API; dynamic config loading; server identity automation; and much more. Let me know if you have any que
765.
Caddy 2.4 Released(github.com)
5 points by mholt 5y ago|1 comments
766.
by mholt 6y ago
(deleted because of unintelligent reply)
767.
by mholt 6y ago
Are you suuuuure about that? > Its payload is a high resolution downward-looking camera for navigation, landing, and science surveying of the terrain, and a communication system to relay data to the Perseverance rover. (From Wikipedia) A
768.
by mholt 6y ago
People use Caddy for automatic HTTPS, which the std lib does not give you.
769.
by mholt 6y ago
That's actually a pretty interesting idea. I wonder if we could make a lite version of Caddy bundled with your website embedded...no need to mess with file systems or permissions or devices and folders to run a static site. Might need
770.
by mholt 6y ago
Hey Andrew, it's Matt from our graduate research lab. This is exciting, congrats! You always did make me thirst for more understanding of ML... guess I'll have to buy this book. Do you make more margins on digital or print copies?
771.
by mholt 6y ago
Awesome, glad to hear it! :)
772.
by mholt 6y ago
Yeah. To clarify, I'm not suggesting it's either good or bad -- just that it's a big deal. To some, it's controversial. I personally think Go's proposed implementation of parametric polymorphism a great feat of mode
773.
by mholt 6y ago
It's easy to learn and and great for getting something useful deployed pretty quickly. In both undergrad and grad school, I often chose Go and my projects -- using the same algorithms as classmates -- were finished sooner, ran faster,
774.
by mholt 6y ago
"There are no changes to the language." It's the calm before the storm. But I love that. :) 10 years in, Go is still my favorite language when it's the right tool for the job. So actually, this is an exciting release IMO
775.
by mholt 6y ago
Matt's Custom Theme? :) I dunno, I haven't named it. Glad you like it!
776.
by mholt 6y ago
Ah, we actually have one of these at Caddy: https://caddyserver.com/docs/architecture (The filename on disk is literally "architecture.md" -- it is a Markdown file rendered by Caddy's template handler:
777.
by mholt 6y ago
Http3 support is being talked about in an issue (am mobile so no link for you right now) but the first priority -- pending dev resources -- is to merge the v2 PR and vet for bugs.
778.
by mholt 6y ago
That's the trick isn't it: having an entire population know something an oppressive government doesn't. Even if you teach everyone how to deploy their own servers, then that's the knowledge the government will start targ
779.
by mholt 6y ago
I'm a big fan of the idea of independently-run proxy servers. Caddy has a secure forward proxy plugin born out of a research project at Google that does something similar, but works with any clients that let you configure HTTP proxies,
780.
Building a Kubernetes Ingress Controller with Caddy(dgraph.io)
2 points by mholt 6y ago|0 comments

More ›