Recent submissions

Comment · 4 years ago
DANE is gaining adoption primarily when it comes to email - browsers are still hesitant.
Comment · 4 years ago
I do trust my own server not to misbehave, but I probably would not trust some random server on the internet.
Comment · 4 years ago
Funny, I reported something similar on the rsync mailing list a couple of months ago: https://www.mail-archive.com/[email protected]/msg33452....

Good to see that it will be fixed. Still, rsync is not the right tool for the job if you do not trust the server.

Comment · 5 years ago
Comment · 5 years ago
Comment · 5 years ago
Correct, Buypass Go has a validity of six months. Unfortunately the free version does not support wildcards yet.
Comment · 5 years ago
This is a good comment. There are I believe a couple more cases where HTTPS is difficult: - You use a dynamic subsubdomain scheme. E.g. abc.xyz.example.org. A wildcard certificate for *.example.org only covers xyz.example.org, not abc.xyz.example.org. Requesting a certificate as the page is requested is possible, but will cause a lot of latency, and you will probably hit the Let's Encrypt rate limit; - You embed resources that are only available over HTTP and cannot be proxied, either for technical or legal reasons; - You request resources from a local IP address, e.g. a website hosted on GitLab Pages that shows you the data from your own DIY weather station which runs in your local network.

These cases are not that common, but that does not make them nonexistent. 99% of websites don't fall under one of these cases (there are probably some others I have not even considered), and should probably support HTTPS.

Comment · 5 years ago
Do you have a source for that? Most of Western Europe has more than two parties in parliament, thus I find that hard to believe.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton