Viewing profile — mmd45

shouldn't compaction be interactive with the user as to what context will continue to be the most relevant in the future??? what if the harness allowed for a turn to clarify the us…

you are assuming i have users and this is a mail server not a website which has a very different access pattern more analogous to ssh where TOFU works beautifully.

for the use case of a single user IMAP server this is all way, way, too complicated and buys you nothing in terms of security. it's completely analogous to why we dont use CAs to v…

bad summary. it prompted you to accept the certificate upon first use and then pinned it which is far different than what you are describing in terms of security implications.

i saw a video on youtube where a guy intercepted https app traffic from an android app for a smart scale where the app used certificate pinning. there was some very automated tool …

how are you renewing the LE certificate if the domain is resolving to an internal ip? this seems like a big hoop to jump through.

per apple dev forums it seems like they have a history of breaking this and then fixing it. additionally, while IMAP is broken, calendars and notes seem to work just fine so hopefu…

explain how a pinned self signed cert is insecure. i don't see it. it would seem to be more secure than one signed by a public CA that's not pinned.

unfortunately none of that applies to my setup. my imap server lives in a dmz and doesn't have all that other jazz.

i'm just using a hardcoded private ip to connect to the imap server. are you saying i can get a certificate with a hostname of "*" that will match ANY ip address?

https://developer.apple.com/forums/thread/732409 (fixed url) seems like the issue is specifically with IMAP- I can confirm that calendar syncing works fine with the self signed cer…

I'm using a private ip over a vpn so I don't think that workaround will work for me. I don't really want a public dns record.

:-( hey lurking apple devs- can someone please escalate this?

There is an interesting argument to be made that pre-JT xz code is probably pretty secure due to the fact that the threat actors would have already audited the code for existing ex…

Given the inevitability of easy voice cloning[1], it seems irresponsible to be using voice as a positive authentication signal. Unfortunately, major US financial institutions seem …

thanks, that seems promising. i will look into it.

https://github.com/trusteddomainproject/OpenARC/issues/163 https://github.com/trusteddomainproject/OpenDKIM/issues/186 OpenARC/OpenDKIM don't parse email headers to spec. Help want…

maybe its an nfc hack. pretty scary how wide open it is/was: https://www.youtube.com/watch?v=eV76vObO2IM

anyone have any thoughts or experience with this?

i've never heard the term narrow banking, but after looking it up isn't that effectively what this company is attempting: https://jiko.io/

interersting. does mercury support bill pay? can you get a cashier's check? how long do deposited checks take to become available for withdrawal?

The killer is the "The bill also prevents investing in an entity in which the IRA owner is an officer." which is generally how the checkbook IRA is structured (IRA owner is the Man…