zzq1015

4 ms·

1.
by zzq1015 10mo ago
From the Datatracker, I can see that it was called SEARCH until draft-2 (Nov 2021), and then changed to QUERY. Also, the previous SEARCH method was proposed in Apr 2015 (!!), but nobody took it seriously, and it never gained traction back t
2.
by zzq1015 10mo ago
PSA: When posting an RFC or (especially) an RFC-draft, please use the IETF Datatracker URL. For example, this one is: https://datatracker.ietf.org/doc/draft-ietf-httpbis-safe-met... The best way to view an RFC, IMHO, i
3.
by zzq1015 11mo ago
I mean, when your business is big enough, you'll naturally start to hire more people. Small businesses don't require a large staff and typically don't generate a substantial amount of revenue. The size of a company (i.e., its
4.
by zzq1015 11mo ago
What if we implement UBI in a way that: 1. Companies not participating in UBI: they have to hire people, even for nothing, but all the staff have to be paid. 2. The others: they are focused on making money without hiring people ("effic
5.
by zzq1015 1y ago
It's a mess when you learn there are also 6in4, 6rd and teredo...
6.
by zzq1015 1y ago
For Linux, there's a kernel setting for that. Just run sysctl -w net.ipv6.bindv6only=1 so IPv6 will not include IPv4-mapped addresses. https://www.kernel.org/doc/Documentation/networking/ip-sysct..
7.
by zzq1015 1y ago
Yeah, despite what it says, I really think Google is gonna ditch 3DES across the board, starting from Gmail.
8.
by zzq1015 1y ago
0.38% of what? For sites like Google, it's still too large to ignore. Also, a fun fact: Google still serves plain HTTP for really old clients, just in case the client barely supports HTTPS.
9.
by zzq1015 1y ago
Oh, I meant on Gmail servers. I always customize TLS versions and cipher suites because I don't trust the defaults. AFAIK you can customize them on: - Chrome & Firefox (can only enable/disable ciphers, no reordering, PQ cipher
10.
by zzq1015 1y ago
"The obvious way to avoid these attacks is to stop using legacy 64-bit block ciphers. Alternatively, the attack can be mitigated by rekeying the session frequently." - https://sweet32.info/ Although I doubt the ol
11.
by zzq1015 1y ago
DES is weak because it only uses 56 bits, and you can brute force it. 3DES has 168 (56*3) bits with the security of 112 (56*2) bits.
12.
by zzq1015 1y ago
I had no idea that you can filter/reject certain TLS versions/ciphers ( on Gmail servers ) before seeing this on the HN front page. https://support.google.com/a/answer/9795993
13.
by zzq1015 1y ago
Probably not just that. 3DES is the last cipher supported by "old" clients (I'm talking Windows XP). If you remove 3DES, the TLS connection will simply fail. You can never imagine how many people are still using WinXP, or oth