Viewing profile — rdme
rdme
HN member- Joined
- Tue, Mar 12, 2019, 2:00 PM UTC
- HN karma
- 112
- Public activity
- 39 items
- HN profile
- View on Hacker News ↗
About rdme
No profile information was provided.
Recent public activity
-
comment
Comment #49211297
[dead]
-
comment
Comment #48199603
might want to check https://github.com/alexandru/social-publish
-
comment
Comment #48138044
actually that is exactly how i am currently running it - dogfooding from my Mac sudo numa install handles launchd, numa then becomes tailscale's fallback resolver docker socket ser…
-
comment
Comment #48136409
honestly, nothing major, just deployed the docker-compose to a hetzner $5 instance https://github.com/razvandimescu/numa/tree/main/packaging/re... then submit a pr to Frank https:/…
-
comment
Comment #48136028
sovereign naming without ICANN or registrars - pkarr through DHT (not blockchain)
-
comment
Comment #48134515
no, you are actually telling the relay where to redirect your question from the start (because you are encrypting the question with the public key of the destination resolver) - th…
-
comment
Comment #48134457
The relay sees IP + ciphertext, the target sees question + relay's IP. No single party gets both
-
comment
Comment #48134438
I agree with you, however that's a separate problem that needs to be solved
-
comment
Comment #48134050
They solve different things. ODoH hides your question, not who you're talking to.
-
comment
Comment #48133603
The relay is a systemd unit on a VPS, Caddy for TLS, SSRF-hardened (regex-strict hostnames, no IP literals). eTLD+1 same-operator check rejects relay+target run by the same org by …
-
story
Show HN: Running the second public ODoH relay
Every privacy-focused DNS service requires an account: NextDNS, Cloudflare for Families, Apple's iCloud Private Relay (paid, iOS-only). The protocol that doesn’t require one - ODoH…
-
comment
Comment #48104336
this must be some a/b testing as i’m not seeing anything different actually it does have a dismissable banner i haven’t even noticed
-
comment
Comment #47852270
How would this work? One would connect it's repository to a cloud platform that would then act based on the existing daemons of the repo?
-
comment
Comment #47750977
Just shipped numa v0.13.0: added request hedging (fires a parallel query after 10ms if the primary stalls, inspired by Google's Tail at Scale paper) wire-level cache with serve-sta…
-
comment
Comment #47714395
should be fixed by #54 in 0.10.3 thanks again!
-
comment
Comment #47665082
Thanks for pointing this out! I’ve created https://github.com/razvandimescu/numa/issues/36
-
comment
Comment #47624071
let me know how it goes
-
comment
Comment #47620209
Split DNS already works — Numa auto-detects Tailscale forwarding rules from the system config. Queries matching . go to Tailscale’s DNS, everything else goes through Numa If you wa…
-
comment
Comment #47618830
This was started as a learning project, went from the start to the lowest level then I've just added features I wanted one by one, it just made the most sense
-
comment
Comment #47618196
let me know if you do it!
-
comment
Comment #47616852
Numa can do recursive resolution from root nameservers + DNSSEC, .numa local domains with auto HTTPS for dev, and LAN service discovery. What features would you be interested in?
-
comment
Comment #47616647
It definitely is and you can see it in the git commits. The DNS wire protocol parser was the original learning project I wrote to understand the spec. Later features (recursive res…
-
comment
Comment #47615725
exactly, I'll add a pr soon that tells the os (and browsers) that is'a a valid domain
-
comment
Comment #47615566
also in romanian nume = name(dns) and I also get the easter egg of that well known Romanian song numa numa :) https://www.youtube.com/watch?v=YnopHCL1Jk8 On OpenWRT — it's musl-bas…
-
comment
Comment #47615458
Yes — numa install generates a local CA and stores it in the system trust store. When you register a .numa service, it generates a per-service TLS cert signed by that CA