revvx

9 ms·

31.
by revvx 7y ago
If you trust your automation, you put private key rotation into it. If you don't trust it your automation, you rotate the keys manually, as you would normally. There are no valid reasons to throw the baby away with the bathwater.
32.
by revvx 7y ago
You can just use the web server that is already running on the machine. You (normally) don't want downtime in your website, so you just let your regular webserver serve the acme challenge instead of stopping it.
33.
by revvx 7y ago
Nope, content marketing company
34.
by revvx 7y ago
It requires some fiddling and it's in experimental state, but yes! Here's the documentation: https://github.com/icing/mod_md/wiki/Migration
35.
by revvx 7y ago
The "manual" process used previously by the company already involved some form of automation, so it was more about trusting CertBot not to do anything horrendous. But now that you mention it, I wonder what's the opinion of se
36.
by revvx 7y ago
Another option is using a Web Server/Reverse Proxy that supports Let's Encrypt automatically, like Caddy [1]. I believe Apache HTTPD has partial support [2], too. [1] https://caddyserver.com [2] https://http
37.
by revvx 7y ago
Exactly. Their FAQ [1] recommends exactly that: renewing every 60 days. [1] https://letsencrypt.org/docs/faq/#what-is-the-lifetime-for-l...
38.
by revvx 7y ago
When pressed, they admitted it was just "gut feeling". The team audited a couple ACME clients and couldn't find anything to justify not automating.
39.
by revvx 7y ago
> Still, this type of oversight seems all too common even in large companies. (...) Has anyone developed a tool designed specifically to avoid certificate expiry disasters? LetsEncrypt renewal is supposed to be automated. [1] I know of a
40.
by revvx 7y ago
It is possible, according to another post by bitbang [1]: > Temporary work around till the cert gets fixed: set "xpinstall.signatures.required" to false https://news.ycombinator.com/item?id=19823879
41.
by revvx 7y ago
In the first example I was merely answering the grandparent. They mentions that people talk about the advantages of compile-time checking but fail to give examples. I'm merely giving an example that other people failed to give them. &g
42.
by revvx 7y ago
I wonder if coming from the other way would be acceptable for fans of dynamic typing. Instead of adding types gradually to a dynamic language (like Typescript sorta does with Javascript), we could add type-checking features that enable a ki
43.
by revvx 7y ago
I think it's hard to point to "bugs prevented by compile-time checks" because of the nature of type-checking. I could just say that every time the compiler refuses to compile my code due to a type error a bug is averted. Typo
44.
by revvx 7y ago
Can I try giving a non-IDE example? I rarely use IDEs, but compile-time checks are super useful for me during refactoring. Sometimes I need to rename a class, a method name or a method signature that is used all over the program. I could us
45.
by revvx 7y ago
You mean running production frontend-only apps? You can just open "index.html" in your browser and it will run fine, as longs as the paths inside your files are relative. You might have to reconfigure your bundler. If you're
46.
by revvx 7y ago
SEO, good content marketing, sponsoring blogs and videos (when done tastefully), product placement, engaging with communities, talking about it in HN/ProductHunt/etc. All those things are acceptable to most people who block ads, I
47.
by revvx 7y ago
That sounds like a great idea, actually. Maybe I misunderstood the gist of it, so sorry in advance if I did, but: It makes a lot of sense to decouple parsing from the rest of the compiler, if only purely from an engineering standpoint. Edit
48.
by revvx 7y ago
Fred Brooks agrees with that. That's what he says in Mythical Man Year, referring to prototypes: "Plan to Throw One Away"
49.
by revvx 7y ago
Yes. After many years I have exactly the same experience that you do. Programming intent and vision is hard to communicate, so sharing code is always a compromise. It's much better to work with smaller units of code that communicate wi
50.
by revvx 7y ago
Brooks idea was even more radical: Put non-coders to work under the chief programmer. Let them help instead of control.
51.
by revvx 7y ago
Microsoft's idea was very different from what Brooks describes in his book. Microsoft approach was more about having senior programmers telling juniors what and how to do their job, aka micromanagement. Brooks is about having programme
52.
by revvx 7y ago
> I've argued before with my leadership that, if we really wanted something done better/faster, we shouldn't be promoting the folks that did it out of the position for the next go around This is similar to what Fred Brooks
53.
by revvx 7y ago
Then get someone to help you run the team, instead of a boss.
54.
by revvx 7y ago
Building good documentation and sharing knowledge is crucial for such teams to work, according to Brooks. Brooks is all about (good) communication. The "Surgical Team" chapter comes right after the "Communication" chapte
55.
by revvx 7y ago
Nice to hear! Sounds like you have a great product AND a plan :)
56.
by revvx 7y ago
Netlify doesn't have a database
57.
by revvx 7y ago
Love it, but one suggestion: I'd change the headline to "1MB – Free and easy static website hosting and database". That database is the edge you have compared to Netlify and Github pages people are asking for :) The authentic
58.
by revvx 7y ago
In the GitHub integration, it could watch for changes in a repository (there's a webhook for that) and then 1mbsite would fetch the files and deploy them. Git integration is like Heroku. The user types `git push 1mbsite master` and 1mb
59.
by revvx 7y ago
But I never said they did?
60.
by revvx 7y ago
It's the second time I mention Fred Brooks on HN today, but he dedicates a chapter in Mythical Man-Month that agrees with the assertion of the article: > Much as a surgical team during surgery is led by one surgeon performing the mo

More ›