• 0 Posts
  • 56 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle




  • My example applied to all distros, the difference would be the time it takes that code change (which resolved a critical to me bug) takes to actually be available to use.

    There’s also very little that’s specific to me about that, it’s a real use case that comes up repeatedly for new releases that tend to push things graphically. I’m only going to recommend distros that minimize the time to get those fixes because it’s a better user experience for the target demographic with little downside.






  • Docker is fine for turnkey applications. Mounting external storage that persists across containers is a feature that enables that pattern.

    Running Docker in a VM is also fine and has potential advantages. However I agree that it’s probably overly complex for many people.

    I’m confused what you’re trying to accomplish here. Are you trying to make it look like the traffic is coming from your VPS for some reason? Nginx (amongst others) can reverse proxy tcp traffic.






  • Isn’t this just CRL in reverse? And CRL sucks or we wouldn’t be having this discussion. Part of the point of cryptographically signing a cert is so you don’t have to do this if you trust the issuer.

    Cryptography already makes it infeasible for a malicious actor to create a fake cert. The much more common attack vector is having a legitimate cert’s private key compromised.