

Mental… contortionist?


Mental… contortionist?


oh my god


our org forbids plain http
is redirecting http to https also out of the question? because let’s encrypt HTTP-01 accepts http -> https redirects:
Our implementation of the HTTP-01 challenge follows redirects, up to 10 redirects deep. It only accepts redirects to “http:” or “https:”, and only to ports 80 or 443. It does not accept redirects to IP addresses. When redirected to an HTTPS URL, it does not validate certificates.


Half a dozen sounds like a lot, kinda curious what you are running? If they all are web services maybe use a reverse proxy or something?


Depends on which DNS service you are using, a plugin might already exist that would do it for you. e.g. I use cloudflare for DNS and certbot is able to automatically set the txt record.


Well it should be as short as possible while still being practical. LE doesn’t have infinite server compute, renewal also takes some amount of time, plus if they make the validity too short people might stop using them (pretty evident judging from sentiment here) and move to other CAs and make what they do pointless.
45 days are still plenty of time yet people are already complaining. Does make me worry.


You can already get 6-day certificates if you want to https://letsencrypt.org/2025/01/16/6-day-and-ip-certs


I’m sorry but if you aren’t using automated renewals then you are not using let’s encrypt the way it’s intended to be used. You should take this as an opportunity to get that set up.


Wait, how’s this worse? This makes the Internet safer by reducing the window a leaked key can do harm.


Win10 already supports TPM 2.0, it just becomes mandatory in 11.
And no, TPM doesn’t spy on you.


No, all client side anti cheats are bad and won’t work. The user space ones are still privacy risks and most importantly is absolutely useless against someone who is determined to cheat.


Enabling anticheat means the user must sacrifice many of their core freedoms just to play a video game. And in principle anticheat will never fully prevent cheating short of pointing a camera at the user and watch them the whole time they are playing.
I hope Linux community can push back. This whole thing is idiotic and harms the consumers.


No waydroid is exactly what they are using.


Not quite true. Rechargeable AAs aren’t as durable and Li-ion battery packs. So you would still end up replacing them more often than you would replace the internal battery.


I mean, Linux player base is only .01%, even if they are all cheaters, they will literally have no impact… You can’t say “Linux user base is too small”, and “if you support Linux you want cheaters” at the same time if you want to make sense.


I am not waiting for it because I personally want to use it. I’m excited for the industry shaping power a Linux OS released by Valve will have.


It’s basically steam deck minus the screen. If you are used to the steam deck it’ll be fine.
You measure distance in time? Is there a standard spe? you use?


So 93% of the Linux users use English steam. I wonder how much of that is because Linux users just don’t bother to set system language (I am one of them), or maybe the language was not detected correctly.
Evil, greedy little bastards…