servercert VS duckduckgo-locales

The current CAB Forum Baseline Requirements call for "Multi-Perspective Issuance Corroboration" [1] i.e. make sure the DNS or HTTP challenge looks the same from several different data centres in different countries.

[1] https://github.com/cabforum/servercert/blob/main/docs/BR.md#...

There's no prohibition against issuing certificates for names on the Public Suffix List.

BR 3.2.2.6 prohibits issuing a wildcard certificate for an entire public suffix unless the "Applicant proves its rightful control of the entire Domain Namespace" (without specifying how this should be done - arguably, publishing a DNS record would qualify) but also says that CAs should use the "ICANN DOMAINS" section of the PSL only, not the "PRIVATE DOMAINS" section, so domains for dynamic DNS providers and the like wouldn't be included in any case. [https://github.com/cabforum/servercert/blob/main/docs/BR.md#...]

That's because some people came along and produced a parallel standard [1] adding loads more rules, clarifications and constraints to convert X509 into something approximately fit for purpose.

[1] https://github.com/cabforum/servercert

This is permitted: https://github.com/cabforum/servercert/blob/main/docs/BR.md#...

But it hasn't really caught on; a lot of registrars don't seem to want the complexity of being (or integrating with) a CA, and vice versa.

It is unfortunate. It's required: https://github.com/cabforum/servercert/blob/main/docs/BR.md#...

No, they don't have to MitM the CA's domain validation request. While they have brief control over the website, they use domain validation method 3.2.2.4.18 (Agreed-Upon Change to Website v2)[1] or 3.2.2.4.19 (Agreed-Upon Change to Website - ACME)[2] to legitimately complete domain validation by making a change to the website.

[1] https://github.com/cabforum/servercert/blob/cda0f92ee70121fd...

I enjoyed those, thanks! I like the circular grid eddy type ones the most. I wanted to highlight some favourites but they have a curious phenomenon where, after studying one for a while, looking at a new one is so refreshing that it always ranks higher so I just get stuck in a circle myself!

Reminds me of the graphic design at "May Contain Hackers 2022" that I really liked: https://mch2022.org/#/ which included a tool to generate similar designs https://mch2022.org/design/

Also reminds me of Bernard Cohen works that I loved in Tate Modern. For me, he achieves something next level which is to go beyond just pressing my "pleasing geometric pattern" buttons but also the type of order/disorder that feels like a human intelligence at work too.

I can't find a page including the ones I have in mind but:

https://www.flowersgallery.com/exhibitions/387-bernard-cohen...

https://www.artnet.com/artists/bernard-cohen/

Sod it, this is probably more comprehensive:

https://duckduckgo.com/?q=bernard+cohen+works&iax=images&ia=...

Recently read that if you are going to be using an LED bulb in an enclosed space, buy bulbs designed for the high temperature, otherwise you WILL get premature failures in bulbs that will last for years in ordinary lamps.

https://duckduckgo.com/?t=lm&q=led+bulbs+enclosed+fixture+ra...

That is easy to say in hindsight when given the example. It is not so easy to see in advance. After all, OOP’s proponents say that OOP makes everything better. You never hear them saying “don’t use OOP here”.

https://duckduckgo.com/?q=oop+inheritance+behavior

I doubt you would find a single result in the top 10 saying not to do this and many will seem to encourage it. One of the results says:

> Inheritance is frequently used to integrate your code with library code

A much younger version of myself said: Daemonizing should be a library function. Let’s use inheritance to do that.

Saying it is not really taught properly is avoiding the reality that you just can’t teach it properly. Knowing for certain when it will not cause problems requires knowing the future.

Someone else is going to be weird and want to look this up so I'll save you the trouble.

Yes, this commenter's claim about line lengths are supported by many, many different sources who recommend a 50 to 80 character line length.

https://duckduckgo.com/?q=reading+optimal+line+length

Or dogs skateboarding, leaning into the curve of the roads.

https://duckduckgo.com/?t=ffab&q=dog+skating&iax=videos&ia=v...

> What percentage of current police departments were conversions from slave patrols? What is the source of this data?

https://duckduckgo.com/?hps=1&q=police+departments+were+conv...

Meanwhile in Germany the people are standing in rows on the streets since 2AM because of some influencer shit about superspecial 'Dubai Chocolate' in limited edition.

https://news.google.com/search?for=lindt+dubai+schokolade&hl...

https://duckduckgo.com/?t=ffab&q=Dubai+Chocolate&ia=web