prdonahue

12 ms·

91.
by prdonahue 7y ago
At Cloudflare we use their Python-based Lemur ( https://github.com/Netflix/lemur ) application to issue (on some days) 1M SSL certificates.
92.
by prdonahue 8y ago
It has NS records because that's how the owner of cloudflare.com (within the Cloudflare Dashboard) delegates control of www.cloudflare.com to another team.
93.
by prdonahue 8y ago
This blip was caused by configuration changes we made to our marketing site (www), which is distinct from any control plane (api/dash) or edge services provided to our customers. Specifically, we were breaking out our "www" s
94.
by prdonahue 8y ago
CF-Connecting-IP is what we recommend using. See https://support.cloudflare.com/hc/en-us/articles/200170986-H... for details.
95.
by prdonahue 8y ago
One of the first (and most important) lessons I learned from @eastdakota when starting at Cloudflare ~4 years ago was how to write a product announcement. Nobody does it quite like him, though @jgrahamc is great too, and I try to encourage
96.
by prdonahue 8y ago
We'll be presenting the original IP. If you wish to block or otherwise take action on, e.g., malicious traffic from the IP being used to connect to Warp, you'll be able to do so.
97.
by prdonahue 8y ago
Sometime in 2Q you'll be able to upload your own client certificate (issued under your own CA if you like) to be used with Authenticated Origin Pulls.
98.
by prdonahue 8y ago
Mind elaborating on "stuff like this"? I'm all ears (eyes): pat at cloudflare.
99.
by prdonahue 8y ago
If you're interested on working on HTTP/3, QUIC, and the author of this post, we're hiring a Product Manager for this team in our London office: https://boards.greenhouse.io/cloudflare/jobs/1251515?g
100.
by prdonahue 8y ago
The problem with this is that you have to complete domain control validation at the apex of the domain, not just on each hostname. If you do per hostname, you can ask a CA to send a validation request to http://sub.domain.com&#x2
101.
by prdonahue 8y ago
You really want to avoid putting too many SANs on a certificate as i) renewal breaks much more frequently; ii) certificate size increases/negatively affects performance due to fragmentation and; iii) browsers many lock up (if you like
102.
by prdonahue 8y ago
Would have gone to a news outlet to try to get them to pick up the story. Someone will write it, will put pressure on the department, and you'll get your video.
103.
by prdonahue 8y ago
Do what I did to unlink it: delete your Facebook account.
104.
by prdonahue 8y ago
This no longer works in Chrome Canary (71). EDIT: to be clear you can configure the setting, but it's not respected anymore. Former Chrome engineer confirming my report here: https://twitter.com/ericlaw/status&#x
105.
by prdonahue 8y ago
Is it just me or does this site screw with the browser's back button? Had to spam it to get back here. Annoying.
106.
by prdonahue 8y ago
Redline as in how strikethrough appears in Word. It's a colloquial term.
107.
by prdonahue 8y ago
It's actually terrible for your butt (or at least your gluteus muscles, especially the gluteus medius). When you sit all day these muscles get inhibited/weak. When they're weak, you're more likely to have lower back pain
108.
by prdonahue 8y ago
Yeah, strange. I submitted the direct Twitter link (with the exact same title) about 5h before this StackShare link was submitted: https://news.ycombinator.com/item?id=17537176 .
109.
Cloudflare, Mozilla, Fastly, and Apple Working on Encrypted SNI(twitter.com)
29 points by prdonahue 8y ago|2 comments
110.
by prdonahue 8y ago
To expand on what Zack said, we're just about ready to merge in Cloudflare Workers support to our golang SDK (see https://github.com/cloudflare/cloudflare-go/pull/188 ). Once this is merged, it clears the
111.
by prdonahue 8y ago
It's been a decade since I've tried writing any queries against their "database" but at the time you couldn't do any sort of JOIN. Has that changed?
112.
by prdonahue 8y ago
As JumpCrisscross said, this is very common. Shortcuts the process considerably and there are a fair amount of failing B/Ds out there.
113.
by prdonahue 8y ago
"Microsoft bought GitHub? Let's move everything to SourceForge!" -- said no developer, ever.
114.
by prdonahue 8y ago
People still use Snapchat? Granted I'm a bit old for their target demographic but it's a ghost town as far as I can see (when I open it once a month). Seems like everyone has migrated to Instagram Stories.
115.
by prdonahue 8y ago
If you haven't seen this episode of Black Mirror yet, highly encourage you do: https://www.imdb.com/title/tt2089050/ .
116.
Sonos updates their Privacy Policy (again)(sonos.com)
2 points by prdonahue 8y ago|1 comments
117.
by prdonahue 9y ago
This company uses some incredibly scummy dark UX patterns. See https://news.ycombinator.com/item?id=13702128 .
118.
Argo Tunnel: A Private Link to the Public Internet(blog.cloudflare.com)
3 points by prdonahue 9y ago|0 comments
119.
by prdonahue 9y ago
Likely that IP address is being used (inadvisably) by something on your network.
120.
by prdonahue 9y ago
What browser are you using? Almost looks like it doesn't support SANs. Either that or the debug is only printing DNS.1. $ openssl s_client -connect 1.1.1.1:443 </dev/null 2>&1 | openssl x509 -noout -text | grep

More ›