Viewing profile — devrand

If you're using ACME to handle certificate rotation, can't you just configure multiple providers?

Is DOGE still there? The latest reporting [1] I've seen is that it's leaderless and has more or less just been absorbed into other organizations. This aligns with DOGE not posting …

It seems like you can also finance it interest free through Apple themselves without being locked to a carrier.

What's the concern here? Can the phone not just be bought outright?

This article links to a Forbes article that states it was a leak of a Saleforce instance that contained contact information about small and medium businesses. This PCWorld article …

You could also use the `_acme-challenge` CNAME record to delegate cert acquisition, assuming you're using separate subdomains for each.

ah-ha! Didn't consider that GoDaddy operates the TLD (in my mind I assumed it was just Verisign). Thank you for pointing that out.

Yeah I don't understand this. MarkMonitor themselves are a registry, so is the potentially a mistake in migrating from GoDaddy to MarkMonitor?

Puget Systems has similar publications covering their experience building client systems, though not always in the same level of detail. They also have PugetBench to benchmark syst…

It was dead long before Google was involved. Pebble filed for insolvency back in 2016 with Fitbit acquiring much of the assets. It was dead at this point. 5 years later Google boug…

I presume it's in a company's interest as L-1 visas cannot be transferred so you're tethered to them.

Looks like WSJ finally implemented bot protection as archive.today just has a CAPTCHA archived.

And the recent antitrust ruling against Google might see Mozilla lose like 80% of their revenue...

I suggest you read the indictment for Megaupload (Wikipedia summarizes it, but they cite the actual document you can view): https://en.wikipedia.org/wiki/Megaupload_legal_case#Basi…

Viacom International Inc. v. YouTube, Inc.: https://en.wikipedia.org/wiki/Viacom_International_Inc._v._Y... .

At least in the short term they probably would. Why not take the basically free money? Longer term, yeah they'll probably just make their own search engine. I highly doubt Google w…

Presumably these deals with Google will be nullified, but can the various browsers just make new deals with someone else? Can Microsoft just just swoop in and make a deal with Appl…

It sounds like they intended to use it as the primary e-mail domain for himself and family. They claimed that they had already switched to using it. However, the total window of ti…

I think they generally give a lot of weight to someone who registered the domain well ahead of the said company registering their mark. Though you might run into trouble if you sta…

That's one option. Alternatively, they could just delegate the _acme-challenge with a CNAME. If clientportal.somebank.com is actually run by somesaas.com, they can define CNAME _ac…

Heck, subscribers could go to 10 day certs today (soon 7) and be immune from revocation entirely.

I think they're suggesting that 1 year certificates are still at the point where people can just manually rotate them as they expire. If you keep reducing the lifespan, to say 90 d…

"Never had to deal with 3rd party SaaS vendors certificate pinning requiring service tickets to change" I think this tends to fall into "probably shouldn't have been using Web PKI"…

Spoke too soon... seems like subscriber(s?) issued DigiCert a Temporary Restraining Order to not revoke: https://bugzilla.mozilla.org/show_bug.cgi?id=1910322#c8 Bold.

Respect to them for actually abiding by the BRs. Most CAs just shrug [1] and [2] say [3] it's [4] too [5] complicated [6], or just lie and claim planes will start crashing [7]. It'…