Viewing profile — Scott_Helme_

No, it was more broad than just SE domains, but trying to detect whether a site is suitable for passkeys support automatically is quite the challenge. Some don't allow themselves t…

I'm not entirely sure that it does, which bit of passkeys are you concerned most with?

This is fixed now: https://whynopasskeys.com/country/se

Interesting, could you link me to some of those sites so I can investigate?

I can kind of see it, but you can also just use an authenticator from any manufacturer, or have multiple types that you use? I'm just curious what I'm overlooking.

What's the concern with using passkeys?

I did try to make it clear in the article. We're powering 2 x EVs, have two adults working from home full time, I have a server rack under the stairs, and we have a hot tub outside…

Absolutely — tariff choice, storage, and automation make a huge difference. The article isn’t claiming this setup is universally optimal, just showing what’s possible when those pi…

We had an expensive solar install due to restrictions around our roof, so the solar would typically have been cheaper. Another consideration is that battery installations in the UK…

The only restriction placed on you is the export rate, which is provided to you by the DNO here in the UK. We had a limit of 3.8kW placed, which is programmed in to the batteries b…

Nah, there's no Bitcoin mining, honest!

How did you know about my laser?!

Thanks! Sometimes the simple tricks are the best ones :)

There is no reason to differentiate between free certificates and paid certificates. The process works in exactly the same way for either.

They're all 3 certificates long (leaf/intermediate/root) apart from Let's Encrypt which, due to their cross-signature, are 4 certificates long for ECC.

If you were to use the same private key for the 4 certificates then you could seamlessly switch between whichever leaf certificate you wanted to serve to the client. I'm not aware …

Let's Encrypt can issue from an ECC chain, I've tweeted[1] the details on how to enable your account for that. [1] https://twitter.com/Scott_Helme/status/1392101598852222976

If you get a 1 year certificate then yeah, but otherwise no. The requirement to re-validate the DNS record comes not from the CA or the use of ACME, but the Baseline Requirements[1…

That's not what I asked, that's a straw man. Browser vendors have tested the efficacy of the current EV indicator, resulting in the current action. If you feel that testing an alte…

But, didn't browser vendors do that and that's why the EV indicator is being moved to a less prominent location?..

As the organisations that stand to benefit financially from selling these indicators, perhaps it's CAs that should invest in the research? CAs seem to constantly point at the brows…

The only way you could do that is on a hosted platform where they do maintenance for you. There's no way a server would last online for decades without being patched, it would have…

I expected less to be honest. The adult entertainment industry has been on a huge drive to encryption recently. It makes sense if you think about the content they serve, I guess pe…