Thom2000

6 ms·

1.
by Thom2000 1mo ago
> (If the author reads this, my name changed from Noel to Neal at some point. I don't really mind though; my name is a bit unusual and I've been called all sorts of things.) I think it'd be good to update the about page wi
2.
by Thom2000 1mo ago
> Your free server will likely have a blacklisted ip address. > > Oracle is exceptionally frustrating to use in the first place. Pay the 5$ a month and use AWS or Digital Ocean Funny thing that you mention this because according to
3.
by Thom2000 2mo ago
Yep. Especially with non-wildcard certs this leaks all service names (privacy concern).
4.
by Thom2000 2mo ago
Sadly most tools still doesn't support it: https://github.com/cert-manager/cert-manager/issues/8373#iss... And then the issue is protecting the private key of the issuer and monitoring certificates (it&#
5.
HardenedBSD Migrates to Radicle(hardenedbsd.org)
5 points by Thom2000 4mo ago|0 comments
6.
by Thom2000 4mo ago
> The artist, JT Nimoy, was an Emacs user but still thought it would be fun to set up a dichotomy--some fun details on this blog I don't see any details about setting up a dichotomy in that article (just that the author was a happy
7.
by Thom2000 4mo ago
Github still doesn't support SHA-256 git repos ( https://github.com/orgs/community/discussions/12490 ) even though their competitors (Gitlab, Codeberg) have that for ages now.
8.
by Thom2000 6mo ago
Sadly services such as Github don't support these so it's mostly good for internal infrastructure.
9.
A year of work on the ALPM project(devblog.archlinux.page)
2 points by Thom2000 8mo ago|0 comments
10.
by Thom2000 9mo ago
> PGP supports RSA. That's enough reason to avoid it. I hate to break the narrative but age also supports RSA, for SSH compat: https://man.archlinux.org/man/age.1#SSH_keys
11.
by Thom2000 9mo ago
I wonder if they think of a deeper integration of this into the age binary. Currently the invocation looks extremely ugly: age -r $(go run filippo.io/torchwood/cmd/age-keylookup@main joe@example.com)
12.
by Thom2000 11mo ago
> My biggest hurdle was getting it to export to a nice looking PDF that could be emailed or printed later. If you can export to structured data such as JSON, I guess Typst would be a perfect fit for that job.
13.
by Thom2000 11mo ago
Exactly! Bearer tokens should be replaced with schemes based on signing and the private keys should never be directly exposed (if they are there's no difference between them and a bearer token). Signing agents do just that. Github&#x27
14.
by Thom2000 11mo ago
FWIW it's possible to run readme examples automatically add part of tests: https://github.com/parallaxsecond/rust-cryptoki/blob/main/cr...
15.
by Thom2000 1y ago
You don't need any third party modules and can proxy based on ALPN ( https://wiki.xmpp.org/web/Tech_pages/XEP-0368#nginx ) thus running everything on port 443. Note that ALPN is not encrypted AFAIK but public w
16.
by Thom2000 1y ago
It's hard to answer your question without repeating the arguments made in the post itself. Are you implying that djb blew the matter out of proportion?
17.
by Thom2000 1y ago
I've used dynamic pipelines. They work quite well, with two caveats: now your build process is two step and slower. And there are implementation bugs on Gitlab's side: https://gitlab.com/groups/gitlab-org&#x2F
18.
by Thom2000 1y ago
Interesting. I've never seen the import-with syntax, though and it's hard to find any documentation on it. Is this a syntax extension?
19.
by Thom2000 1y ago
Sadly, Rust proc macros operate on tokens and any serious macro implementation needs third-party crates. Compile-time reflection, with good, built in API, akin to C# Roslyn would be a real boon.
20.
by Thom2000 2y ago
"comment" may be relevant to the object. Maybe using "_" for the whole object comment would be safer?
21.
by Thom2000 3y ago
That clarifies some matters - thanks!
22.
by Thom2000 3y ago
It seems like everything you have described could be done with TPM: creating a signing key for TLS mutual authentication (against the secret store) with policy that allows using that key only if system configuration did not change (PCR valu