Viewing profile — GuidoW

Thanks, My use case is to get my VPS run a web and mail service on Nixos but without the bloated binary logging of journalcontrol. The indexes in these log files change heavily bet…

Agreed. One point is that processes other than root cannot start services on ports However, with single-serving services (e.g. in vm/container/vps/cloud), there is no need for it. …

> Use NixOS and you'll love systemd. I use NixOS but certainly not love systemd. Instead, I've created a way to replace it with s6.[1] 1: https://sr.ht/~guido/nixos-init-freedom/ C…

> TLS gets you an encrypted secure channel between the client and the server, and DNSSEC gives you... a signed name lookup. I respectfully disagree with that second part. The risks…

My beef with many chat apps is to have to authenticate with my telephone number or an email address. Both are hard to acquire in sufficient quantities for a 'normal' user. So I cam…

The problem is that the input is parsed twice. First by the netmask function that reads 0127 as 127 and the second time by the js-network stack code that reads it differently. The …

The failure mode of TOTP, SMS is that the user needs to be sure to be connected to the correct site. The hidden assumption is that the use is able to distinguish the fake from the …

I've designed this protocol[1] to make client certs work easy for end users. Signing up at a site is just requesting a client cert at the site's private CA. It requires a user agen…