buffrr

5 ms·

1.
by buffrr 4mo ago
Operators are what assemble the bindings in the trie. Anyone can become an operator by bidding in an auction. You can read more about it at https://spacesprotocol.org they don't have much power besides adding your name -&gt
2.
by buffrr 4mo ago
> The append-only, distributed nature of the traditional SKS PGP keyserver network seems to provide the same sort of thin > most of them would have to conspire to forge a mapping. The mapping is recorded in an immutable ledger (bitcoi
3.
by buffrr 4mo ago
I have addressed key transparency in the post :) Key transparency does help with detection (still requires trusting third parties or having to check yourself) but the proposed protocol makes it not possible to forge the mapping to begin wit
4.
by buffrr 4mo ago
there's nothing wrong with a keychain or password manager holding your keys. passkeys already work exactly this way, completely transparent to the user. it's fine for most users.
5.
by buffrr 4mo ago
> not address recovery of lost keys/identities Key loss is hard but not insurmountable. Social recovery / split-key custody seem like the right direction. Apple uses "recovery contacts" if you have advanced data prote
6.
Are we self-sovereign PKI yet?(buffrr.dev)
1 points by buffrr 4mo ago|0 comments
7.
by buffrr 4y ago
> Cloudflare Workers and Deno Deploy are ephemeral, as in, the process that serves client request is not long-lived, and in fact, two back-to-back requests may be served by two different isolates (processes) I suspect this would impact l
8.
by buffrr 4y ago
We already built a separate application and wanted to avoid making a browser for a while. The idea for Beacon started when we wanted decent support for iOS and android, which nowadays is like the majority of users. It's easy to install
9.
by buffrr 4y ago
> but I wanted to make sure you were choosing the contribution path you wanted to build upon > that goes double because it already has tight coupling to GN due to Chromium Interesting i'll experiment with moving this to GN. I hav
10.
by buffrr 4y ago
> Why are you swallowing "error" from invoking the "reall" tool? That seems like a great way to make contributors really frustrated Glad you're looking at the code! There's still some refactoring needed for
11.
by buffrr 5y ago
yeah the initial standard was dropped by tls-wg. RFC9102 is more recent/an independent submission. > 3. An attacker with a valid certificate can strip dnssec-chain-extension out of a TLS handshake. That's true but decentralized
12.
by buffrr 5y ago
Something to consider in the future is implementing RFC9102[0] which is an experimental TLS extension for embedding the DNSSEC chain this should significantly improve TTFB. It'll still need to request the DS record/trust anchor fr
13.
by buffrr 5y ago
It uses WKNavigationDelegate[0] it allows responding to authentication challenges by accepting/rejecting certificates or continuing with default handling. This is used to do certificate pinning. DS records are stored on chain and reque
14.
Vcpkg – Cross platform C/C++ dependency manager(vcpkg.io)
2 points by buffrr 5y ago|0 comments
15.
by buffrr 5y ago
I have been following Gio development for quite some time, and it's still in the early stages. Text selection was added recently. It could be better but it's a good start. Double click to select a word and triple click to select p
16.
by buffrr 5y ago
I think the analogy here is weak. A blockchain-based naming system is different, though. It's governed by consensus. The majority of users must agree on who owns a particular name or at least that's how it should work. Don't
17.
by buffrr 5y ago
yeah that's the thing who owns the bridge? some may argue that control of ownership should be decentralized and some may disagree. but like I said it wouldn't be too bad if users ended up using it under some TLD but that's my
18.
by buffrr 5y ago
I believe they distributed around 70% of the coin supply to open source developers (I think only a small percentage claimed so far). The names are sold in auctions and the coins are burned after the winner is declared (I understand that ear
19.
by buffrr 5y ago
> The central KSK is a reason for normal users to dislike DNSSEC, but it's not why virtually nobody in the industry has deployed it, even though we're rapidly closing in on 3 decades of standardization effort for it. I'm a
20.
by buffrr 5y ago
Creating an alternative or an extension to the DNS root is pretty ambitious. If they had chosen a TLD similar to .eth, .bit ... etc., it would have been more manageable, and they could've avoided issues with name collisions. However,
21.
by buffrr 5y ago
> Are you sure of that? I checked an archive of root zone data from June 1999 to May 2021[0], and there don't seem to be A records for any TLD. Not sure why you're having this issue, but I'm curious to know which Linux dis
22.
by buffrr 5y ago
The A record was never in the root zone. The root zone has an NS record for ai TLD which delegates authority to ai nameservers. You can try `dig @a.root-servers.net ai NS` to get the nameserver `a.lactld.org.` which is authoritative for ai.
23.
by buffrr 6y ago
The last time I went to Fry's was four years ago. They had servo motors, gears, structural aluminum plates, and lots of electronics parts that you could use to build robots or other cool things. You can get the same parts online from s
24.
by buffrr 6y ago
I was curious why a "null MX" is even needed. If there are no MX rrs it would mean that this domain doesn't handle mail, right? It's actually because of the "implicit MX" rule defined in rfc5321[0]. If there ar
25.
by buffrr 6y ago
To answer your first question, with the present DNS, If you use DANE, the trust is centralized since you have to trust the root DNS keys and the registrar (imo still better than trusting a large number of CAs. letsencrypt already relies on
26.
by buffrr 6y ago
I think what they meant is that with decentralized DNS, it is possible to replace certificate authorities by using DNSSEC + DANE RFC6698[0], but I agree the way it's mentioned is confusing. [0] https://tools.ietf.org/ht
27.
by buffrr 6y ago
You should try Jetbrains Goland if you're looking for a modern IDE with a great debugging experience [0]. If you're talking about visual studio being modern, i don't think that's true. I have used it recently and i was s