Viewing profile — buffrr

Operators are what assemble the bindings in the trie. Anyone can become an operator by bidding in an auction. You can read more about it at https://spacesprotocol.org they don't ha…

> The append-only, distributed nature of the traditional SKS PGP keyserver network seems to provide the same sort of thin > most of them would have to conspire to forge a mapping. …

I have addressed key transparency in the post :) Key transparency does help with detection (still requires trusting third parties or having to check yourself) but the proposed prot…

there's nothing wrong with a keychain or password manager holding your keys. passkeys already work exactly this way, completely transparent to the user. it's fine for most users.

> not address recovery of lost keys/identities Key loss is hard but not insurmountable. Social recovery / split-key custody seem like the right direction. Apple uses "recovery cont…

[dead]

> Cloudflare Workers and Deno Deploy are ephemeral, as in, the process that serves client request is not long-lived, and in fact, two back-to-back requests may be served by two dif…

We already built a separate application and wanted to avoid making a browser for a while. The idea for Beacon started when we wanted decent support for iOS and android, which nowad…

> but I wanted to make sure you were choosing the contribution path you wanted to build upon > that goes double because it already has tight coupling to GN due to Chromium Interest…

> Why are you swallowing "error" from invoking the "reall" tool? That seems like a great way to make contributors really frustrated Glad you're looking at the code! There's still s…

yeah the initial standard was dropped by tls-wg. RFC9102 is more recent/an independent submission. > 3. An attacker with a valid certificate can strip dnssec-chain-extension out of…

Something to consider in the future is implementing RFC9102[0] which is an experimental TLS extension for embedding the DNSSEC chain this should significantly improve TTFB. It'll s…

It uses WKNavigationDelegate[0] it allows responding to authentication challenges by accepting/rejecting certificates or continuing with default handling. This is used to do certif…

I have been following Gio development for quite some time, and it's still in the early stages. Text selection was added recently. It could be better but it's a good start. Double c…

I think the analogy here is weak. A blockchain-based naming system is different, though. It's governed by consensus. The majority of users must agree on who owns a particular name …

yeah that's the thing who owns the bridge? some may argue that control of ownership should be decentralized and some may disagree. but like I said it wouldn't be too bad if users e…

I believe they distributed around 70% of the coin supply to open source developers (I think only a small percentage claimed so far). The names are sold in auctions and the coins ar…

> The central KSK is a reason for normal users to dislike DNSSEC, but it's not why virtually nobody in the industry has deployed it, even though we're rapidly closing in on 3 decad…

Creating an alternative or an extension to the DNS root is pretty ambitious. If they had chosen a TLD similar to .eth, .bit ... etc., it would have been more manageable, and they c…

> Are you sure of that? I checked an archive of root zone data from June 1999 to May 2021[0], and there don't seem to be A records for any TLD. Not sure why you're having this issu…

The A record was never in the root zone. The root zone has an NS record for ai TLD which delegates authority to ai nameservers. You can try `dig @a.root-servers.net ai NS` to get t…

The last time I went to Fry's was four years ago. They had servo motors, gears, structural aluminum plates, and lots of electronics parts that you could use to build robots or othe…

I was curious why a "null MX" is even needed. If there are no MX rrs it would mean that this domain doesn't handle mail, right? It's actually because of the "implicit MX" rule defi…