josephcsible

> Tell that to people pursuing the American citizenship that were born in American territories like American Samoa or Puerto Rico, where, unlike US states, they get drafted, they cannot vote and th…

You're mad at the wrong people. The security argument is legitimate, so there's no need for your scare quotes. The weaknesses in TLS older than 1.2 are real. You should instead be upset at d…

This is no different than an OCSP server going down for a day. Either the site becomes unreachable, or clients take a risk by accepting a certificate that might be revoked.

When I search for that, all of my hits are about a key-transport protocol that doesn't seem related to certificates at all. Expiration and revocation are far from the same thing. If my site'…

In your hypothetical scenario, do you care whether the batteries are recoverable and reusable? If not, then you lose a lot of the benefit of electrification.

Are you sure? That's the path that InCommon has been providing me for new certificates since they switched away from the expiring one.

I don't see anything about expiration in that talk. If you don't have a strong revocation system, then your host is vulnerable whether or not you have expiration, since attackers aren't…

There's actually a third certificate for "USERTrust RSA Certification Authority", also using the same key pair, signed by a different root called "AAA Certificate Services". I…

If you're rotating a self-signed certificate, then how do you suppose that clients securely trust it? Or if you just mean replacing it when it expires, then this could instead be tied to the unde…

They said "certificates should never expire or should expire daily". Roots already can't be revoked, so they should never expire. Intermediates and leaves should expire daily. Since cur…

IMO, there's a bit of a design flaw with curl here. There should be an easy flag to say "trust the particular certificate with this hash, no matter what's wrong with it", but there…

Exactly. Certificate expiration has never really been about security. It's purely for practicality, so that CRLs won't grow without bound. This is especially true now that we have OCSP stapl…

For anyone unaware of the details of this, here's the gist of it: if you run Oracle in a VM, you need to pay for Oracle licenses for every CPU of every host in the entire VM cluster, even if you …

But even assuming the high end of your estimate, Postgres + PostGIS would still be less than 1/10 of the size of a baseline Oracle installation.

Yes to both, and doing so also makes it non-free per the FSF. Here's what they say about the Anti-996 license [1], as well as about this concept in general [2]. Caveat to the second point: while …

Rust is probably the most mainstream language that uses affine types. Once you call a function that takes ownership of a value (e.g., `drop`), the compiler won't let you use it anymore after the …

Using classes and objects for laziness is a hack to work around the limitations of OOP. In more functional languages, there are better ways to accomplish that. For example, in Scala, you can just use …

You only lose deferred execution in this case because it didn't go far enough away from OOP and toward FP. For example, since Haskell is a pure functional language, it can be lazy by default, mea…

That's actually an argument in favor of linear or affine types. In your example, you'd still get a new Wallet from that function, but the compiler would keep you from accidentally using the …

I don't think Rust really makes NULL dereferences any better. In practice, a NULL dereference in C is almost always "just" a crash that can't be turned into something worse (unlike…

Not a Firefox issue. The same happened to me in Chrome.