cpach

If FBI went to Godaddy and said, “We need a cert for www.google.com”, Godaddy would most likely refuse. Issuing that cert would leave a trail that would be extremely undesirable for both FBI and Godaddy.

Aaah, Krtek! Such a cute little fellow :)

Would it really be worth the extra complexity?

Another option: Use ACME together with ARI (RFC 9773). The client checks ARI data every hour. If the cert needs to be replaced – for example like in this scenario – the CA will inform the client, which in turn would then request a new cert.

I know it’s not convenient to automate for every kind of device though. I guess in some of those cases it might be better to have a load balancer in front of the device. Or use an alternative PKI.

Not very many, but yes

As a small child I liked Janosch’s books about the tiger and the bear. For example Ich mach dich gesund, sagte der Bär (I’ll Make You Well, Tiger, Said the Bear).

When I got a bit older I really enjoyed the Narnia books by CS Lewis. And The Belgariad by David Eddings.

I read a lot, but many titles are probably not available in English.

Uhm, okey. But how is that related to Photopea? Are you arguing that copyright laws are void for software that display ads?

What does that have to do with software that is financed by ads?

Why don’t you just install GIMP instead of using Photopea?

I’m no cop. I just want HN to keep being a civil place. I hope you agree :)

Well, shouldn’t that be up to the original developer? He made a product and let people use it for free. But no-one is forced to use it. And there are other image editors without any ads. Some are proprietary, and some are FOSS, e.g. GIMP.

Please don’t attack other HN members. It’s not nice and it’s against the guidelines.

I don’t like ads either. So I just paid for a local image editor and use that one instead. The developer of the product gets paid, I get a great ad-free image editor.