devrand

This has come up in discussions before. The argument that small CAs shouldn't be in root stores since they have huge risk for little upside is compelling, except that it would also make it impossible for businesses to enter the market. You'd need to prove you have market share, but you cannot reasonably get market share if you're not in a root store.

So you'd just end up with the big players (ex. Sectigo, who cross-signed these certs btw), who would then claim too big to fail should anything actually go wrong with them (see: Comodo).

All two letter TLDs are reserved for ccTLDs.

If you're using ACME to handle certificate rotation, can't you just configure multiple providers?

It seems like you can also finance it interest free through Apple themselves without being locked to a carrier.

What's the concern here? Can the phone not just be bought outright?

This article links to a Forbes article that states it was a leak of a Saleforce instance that contained contact information about small and medium businesses.

This PCWorld article seems to be taking that to mean that every single gmail account (2.5B) is at risk with nothing to support that claim.

You could also use the `_acme-challenge` CNAME record to delegate cert acquisition, assuming you're using separate subdomains for each.

ah-ha! Didn't consider that GoDaddy operates the TLD (in my mind I assumed it was just Verisign). Thank you for pointing that out.

Yeah I don't understand this. MarkMonitor themselves are a registry, so is the potentially a mistake in migrating from GoDaddy to MarkMonitor?

Puget Systems has similar publications covering their experience building client systems, though not always in the same level of detail. They also have PugetBench to benchmark systems in real-world applications/workflows.

It was dead long before Google was involved. Pebble filed for insolvency back in 2016 with Fitbit acquiring much of the assets. It was dead at this point. 5 years later Google bought Fitbit.

I presume it's in a company's interest as L-1 visas cannot be transferred so you're tethered to them.

Looks like WSJ finally implemented bot protection as archive.today just has a CAPTCHA archived.

And the recent antitrust ruling against Google might see Mozilla lose like 80% of their revenue...