willglynn

31 ms·

121.
by willglynn 11y ago
Short answer: because the CA/B forum requires this. See "Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates, v.1.1.7" section 13.1.5 point 3. https://cabforum.org/wp-content
122.
by willglynn 11y ago
Anecdote: back in 2009, I had a Comcast account in a metered market and didn't need cable service for a bit, so I tried an experiment. I plugged my cable modem into a dumb switch. It had a link, but there was nothing else attached; the
123.
by willglynn 11y ago
In addition to that, putting user-supplied content on separate domains allows GitHub to list those domains in https://publicsuffix.org/ , which they did: // GitHub, Inc. // Submitted by Ben Toew
124.
by willglynn 11y ago
Also, they don't support any kind of two-factor authentication, and have no plans to add that: https://twitter.com/AskCapitalOne/status/504679257239719938
125.
by willglynn 11y ago
"Privilege escalation" implies a vulnerability, but this behavior is by design and -- as the author notes -- already documented. http://docs.docker.com/installation/ubuntulinux/#create-a-do... > Warni
126.
by willglynn 12y ago
FTP is just as unauthenticated as everything else above, so having MD5SUMs available over FTP doesn't really change the situation.
127.
by willglynn 12y ago
Go has a TLS package and dependencies which are almost entirely written in Go: http://golang.org/pkg/crypto/tls/
128.
by willglynn 12y ago
Stallman here wrote: If GNU packages do not support each other, it will be easier for many of them to fail. This reminds me of a recent article describing his objections to work towards exporting the AST from GCC for use in Emacs: