• 4 Posts
  • 265 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle



  • Press X for doubt… butif he truly doesn’t need the money and you provide for all his wants, you should tell him to put it in a 401k/RRSP/Whatever investment vehicle is available in your country, use the opportunity to teach him about compound interest and make sure he’s set for retirement. It’s crazy how little you need to invest if you do it that early.



  • Absolutely. Simply use ACME with the DNS validation method. Using bind you’ll want to create keys and allow TXT access for those keys to the validation domains. Fear not, this isn’t exclusive to bind, ACME tools supports dozens of other backends. That’s all you need the actual domain doesn’t need to be resolvable with an A/CNAME record. Internally you can run an entirely different DNS server to resolve your hosts, use hosts files, or use bind zones.


  • Except it isn’t. Saying it is trivial is just gross generalization. It’s trivial to configure bind to have internal zones that aren’t resolvable publically. It all depends on configuration, such as reverse ns entries, zone accessibility, etc.

    You can have (sub)domains that are listed in the certificate lists and yet aren’t resolvable externally as well.











  • That’s essentially how most distributions of Linux and Unix work. You package an app with a list of depencies like “libcaca >= 1.2.3” and that’s that. If that dependency isn’t available in the distro you need to have that packaged (and thus have a maintIner for said package) first. The distro’s package maintainers are responsible for keeping an eye on the upstream sources and provide reviews. Often there’s also a security team that watches for packages requiring expedited attention, and security backports.

    Then this sort of crap like NPM came along and it became popular for devs to package their own dependencies.