elliottinvent

8 ms·

1.
by elliottinvent 3y ago
I'm working on a couple of projects that are along these lines: - Domain Verification Protocol [1][2] – proving authority over a domain. This is an application of our broader technology (still in development) where the domain can repre
2.
by elliottinvent 3y ago
Wait til you see the Twitter account: https://twitter.com/htmx_org
3.
by elliottinvent 3y ago
> all it does is do simple things by adding attributes to html elements It’s extending html to make the most of http by adding some simple attributes. Like all great things - the building blocks are simple, but the possibilities of what
4.
by elliottinvent 3y ago
Very active, helpful community on Discord [1] and a #htmx-2-dev channel for discussion on this very topic 1. https://htmx.org/discord
5.
by elliottinvent 3y ago
Admittedly I didn’t get that [1] far, thanks for pointing it out. I read the first half but he lost me at conversational dynamics (I mainly come here for the comments). The battery analogy was a good way for me to understand my own experien
6.
by elliottinvent 3y ago
It was recently explained to me: Introverts charge their battery in solitude and discharge it socialising. Extroverts the opposite.
7.
by elliottinvent 3y ago
If only all properties were pitched expertly by the vendor, like the “never ending property” [1] With high end 70s chintz and cheese production values. 1. https://m.youtube.com/watch?v=kynbFDou6GI&feature=youtu.be&c.
8.
by elliottinvent 3y ago
Thanks for the heads up and I'm sorry about that, I can't seem to recreate it in Firefox at the moment but I'll get to the bottom of it. Are you in automatic/dark/light mode? Your Firefox version would be a big help
9.
by elliottinvent 3y ago
Thanks for the heads up, home page or any page in particular? It’s ok for me but I’ll check the logs. It’s just a basic fly.io setup at the moment but it should be more than capable of dealing with the traffic - just html (and htmx) front e
10.
by elliottinvent 3y ago
Oh and to prevent what happened last time (the post getting flagged as an overheated discussion), I'm going to close the laptop and come back to this in a few hours! So if you ask a question, I'm not ignoring you – I'll respo
11.
Show HN: Automatic Domain Verification(domainverification.org)
27 points by elliottinvent 3y ago|9 comments
12.
by elliottinvent 3y ago
Thanks for this really interesting feedback – especially that the subdomain method could create more opportunities for cache poisoning. Interested to explore how a cache poisoning attack might be easier on a Domain Verification protocol TXT
13.
by elliottinvent 3y ago
Interesting idea. If I understand correctly, let’s say a popular CDN was no longer maintained and the domain expired, eg popularcdn.com - you’re looking for a way to use a dns record lookup to verify that the domain (and cdn) is still cont
14.
by elliottinvent 3y ago
* https://www.dnshelper.com
15.
by elliottinvent 3y ago
If you’re doing more than domain verification, there are a couple of other options you might want to consider [1][2]. Both are run by really good guys that’ll answer any questions you’ve got. https://www.entri.com https:/&
16.
by elliottinvent 3y ago
That’s correct, we have a couple of projects that use DNS TXT for storing data and JSON and TXT records are not a good fit. My description above references compactdata, which as you pointed out is the new name for MODL which uses to live at
17.
by elliottinvent 3y ago
Hop on the Discord, a very active and collaborative community: https://htmx.org/discord
18.
by elliottinvent 3y ago
I think the point is that by using HTMX your site can degrade gracefully for non-JS users. A site for a project of mine [1] is built with HTMX and operates more or less the same for JS and no-JS users. I’m aiming to add some bells and whist
19.
by elliottinvent 3y ago
True, but well designed houses that have natural places for the things a well functioning home needs, are far easier to keep clean and tidy.
20.
by elliottinvent 3y ago
WHOIS is largely useless now because of Privacy Protection Services, Proxy Registrants and GDPR. The WHOIS protocol itself is more or less entirely shut down in favour of RDAP [1]. 1. https://www.icann.org/rdap
21.
by elliottinvent 3y ago
Expiry dates are optional at the moment but perhaps the requirement for an expiry could be set at the domain level. For example a query to: _dv.example.com Reveals domain-wide settings like: 1. All verification must have expiry date. 2. Max
22.
by elliottinvent 3y ago
I can see the appeal. However, this solution is to ease friction for the average domain owner trying to onboard with service providers. Historically, public/private keys and the man in the street rarely get along.
23.
by elliottinvent 3y ago
> This seems like a nice option to have, and I appreciate the thought put into it. I really appreciate this comment, thanks. > Personally I think I'd prefer to decouple my email / phone / etc from the ownership of some
24.
by elliottinvent 3y ago
I'd say "riddled with spelling mistakes" is a bit strong in our example (I realise you weren't claiming that about the site). I got it out early to get some feedback. The 404 spec link is a bad one (since fixed) but the
25.
by elliottinvent 3y ago
> Hostile service provider A could request ownership of domain X with some other service B. When you, the owner of domain X, go to register ownership of domain X with A, A can show you the information provided service provider B and end
26.
by elliottinvent 3y ago
There is quite broad registrar support, some of the original people behind it at GoDaddy left for other projects and so I think the team have got some things to tidy up. It's been around much longer than a year though. > IONOS, one
27.
by elliottinvent 3y ago
Thanks for mentioning this protocol – I've been a fan of Domain Connect [1] for many years and referenced it in one of my earlier comments [2]. Our Record Creator tool [3] integrates with Domain Connect, so if you want to setup a Domai
28.
by elliottinvent 3y ago
Do you mean LE or DNS-01? DNS-01 is unique per service provider. I don't think domain registrants care about protocols, they care about how many things they've got to do with their DNS. With DNS-01 and older methods it was based o
29.
by elliottinvent 3y ago
> As far as I can see, this system doesn’t prove that the email address controls the domain now; it proves that it controlled the domain at the time it was set up. This is a really good point, thanks. For a single service provider who ha
30.
by elliottinvent 3y ago
DNS-01 is a standardisation of the same methods service providers have been using for well over a decade. Ok they've started using subdomains instead of the apex [1], but really it's more of the same. This protocol offers addition

More ›