How to setup a Handshake site with Caddy

https://blog.webb.page/2021-05-15-secure-handshake-and-caddy.txt

by NetOpWibby • 5 years ago

46 28 5 years ago

blog.webb.page

superkuh3• 5 years ago

More London Trust Media Holdings corporate moves to try to monetize the FOSS properties he's bought (Private Internet Access, Linux Journal, freenode, snoonet). Handshake was/is an attempt to use Freenode to start a cryptocurrency to further enrich himself. But since the Freenode community didn't bite I guess they're casting a wider net now.

rasengan3• 5 years ago

This statement made by superkuh is false in its entirety.

1. LJ - Bankrupted, 500K debt. LTMH paid off the debt in full and funded the operation for the next 2 years, before a much more well funded entity was able to take over - for free. Earnings: negative. Profit potential activity: 0. Funding: > 2m.

2. freenode - Reached out to LTMH for funding multiple times and LTMH always obliged. Earnings: negative. Profit potential activity: 0. Funding: > 1m.

3. Snoonet - Continues to run under its own policies. Earnings: negative. Profit potential activity: 0. Funding: > 50K.

Other:

Handshake is not an LTMH project. That being said, the Handshake project received 10m of funding and provided all of it to FOSS projects.

superkuh3• 5 years ago

If it isn't clear to anyone else, this commentor saying I am wrong is the owner of the corporation.

bdcravens• 5 years ago

How is PIA a FOSS property?

judge2020• 5 years ago

Yes, there is a blockchain involved but we're not going to get into that.

Maybe provide a link to people interested in learning or wondering why the blockchain part might be concerning/daunting.

ameliaquining• 5 years ago

I don't know anything about this project, but blockchains are the only known technology that can let people globally register human-readable names without allowing any other party to tamper with them. So it's not surprising that one is used by an alternative DNS root project. The more concerning/daunting thing is trying to do an alternative DNS root at all.

buffrr5• 5 years ago

Creating an alternative or an extension to the DNS root is pretty ambitious. If they had chosen a TLD similar to .eth, .bit ... etc., it would have been more manageable, and they could've avoided issues with name collisions.

However, there are some advantages to decentralizing trust in the root since there won't be a need for a root KSK[0] or a central entity that manages the root zone making DNSSEC + DANE more appealing even for existing TLDs.

[0] https://www.cloudflare.com/dns/dnssec/root-signing-ceremony/

NetOpWibby4• 5 years ago

I did, at the bottom. (0)

francislavoie• 5 years ago

Do you really need light-ca? Caddy ships with smallstep, i.e. can act as its own CA, and can act as an ACME server for mTLS even.

All you need to do is use "tls internal" (instead of specifying a cert/key), and if you want enable the ACME server, then you can use the "acme_server" directive https://caddyserver.com/docs/caddyfile/directives/acme_serve...

NetOpWibby4• 5 years ago

I had no idea! Welp, TIL!

BoppreH• 5 years ago

I love Caddy (running my own personal page with it), and I think DNS is one of the few truly useful applications of blockchains.

Unfortunately, Handshake is a blockchain that builds consensus via Proof-of-Work and the environmental impact cannot be ignored. The Handshakw FAQ[1] handwaves it away by saying that most of the energy probably comes from renewables and they hope it'll be almost all of it soon, but provides no sources for this critical assertion.

[1] https://handshake.org/faq/

dogecoinbase• 5 years ago

If you're curious about the Handshake project, this is basically all I needed to hear: they based their domain-claiming system on DNSSEC -- and when they launched they couldn't even claim their _own domain_ because .org was still signed with a RSASHA1-NSEC3-SHA1 key: https://github.com/handshake-org/hsd/issues/399

NetOpWibby4• 5 years ago

There's a massive gifting effort within the Handshake community and I'm pretty sure a community member owns it now.

- http://handshake.hns.to

dadrian• 5 years ago

I don't understand how Handshake isn't fraud. They're "selling" ownership of domains that they don't own. ICANN owns the domains. It'd be like if I decided that I was going to replace US property records with a blockchain, and I began by reallocating 70% of the land in the United States to open-source developers.

tasuki• 5 years ago

ICANN is only operating a very limited number of TLDs. Handshake has reserved those for ICANN, and introduced many more TLDs to choose from.

How to setup a Handshake site with Caddy

Related Stories