Viewing profile — wejn

Svalboard is the next generation Datahand. In other words, a keyboard with zero hand movement, optical switches, and mostly querty layout (or Dvorak, Colemak, if you want it). Unli…

Why don’t you get a svalboard.com then? (It’s a commercialized next gen of lalboard)

Yup. Been running my own for past two decades, still works.

If you destroy the CA, how do you issue new certs via ACME?

This isn’t strictly true. If you want to uphold the name constraints in your CA cert, mark the field as critical. At that point clients that don’t understand them should fail valid…

Thanks, I've incorporated the name constraints into the article now. (it is indeed supported by Apple and FF just fine)

"only" out of scope. But based on the comments here, I guess you could use the smallstep CA with Nitrokey HSM if that's your jam...

Because: 1. ACME is a dumpster fire prone to mitm attacks. 2. without HSM (an additional investment) it's super bad idea to host your root CA signing key somewhere.

That's really neat, thanks for the pointer. ;)

And yet, my homegrown root CA cert with 3650 days of validity hums along just fine... [edited: but since I also want to have host certs that are on various internal servers, the sh…

A friend of mine runs dns01 thusly: https://ipng.ch/s/articles/2023/03/24/lego-dns01.html

Hmm, that's an interesting point. I would encourage them [= someone who only spent a couple of hours on Unix] to dig further... broader. Mostly by demonstrating that there are real…

True. Just a couple of hours. On the other hand... is walltime the only criterion worth considering?

Interesting. I thought that I was tearing down the fact they took the brilliant new idea, and bastardized it beyond recognition, and in multiple ways. I loved the promise of Urbit,…

And there I was, thinking that the first four paragraphs pretty much summed up the frame of mind with which it was written.

Ehm, nope: ivmmeta.com

That'd be no (for natural immunity). Even SARS-1 survivors have immunity to COVID, all these years later. Maybe for the synthetic immunity (who knows). But in any case, SARS-1 and …

Thank you for the compliment. I can wholeheartedly recommend starting. Just about anywhere, really. I'm a total noob when compared with real electronics engineers... but it doesn't…

:-) I so wish I could lay claim to that phrase. In any case, I wholeheartedly recommend giving "Screen Rant Pitch Meeting" a watch (on YT).

If I were in your shoes (and I often am, in various other contexts), I'd get the cheapest SDR dongle, and then use your favorite search engine for tutorials (there's plenty). First…