HN user
TIL, thanks! This makes dns challange automation more approachable for me. I always had an issue with API keys which scope can't be limited to TXT records. This seems to be a nice workaround
... and it is even already documented at https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo...
OP here. Actually I tried to use it but apparently prematurely -> https://github.com/acmesh-official/acme.sh/issues/7085#issue...
Once it's supported I think my next iteration will be DNS persist + internal ip addresses on the public zone.
Thank you all for comments and feedback! It's cool to see real interest in this blog post
I've documented how to securely set up TLS certificates for internal services without creating TLS issues for http clients downstream. All thanks to split-horizon DNS, WAF and ACME protocol. All for free!
Thank you. First explanation what might be the root cause :)
This is an interesting alternative to password manager, esp. if you want to version control your secrets https://github.com/getsops/sops
I wonder why pgtyped [1] was skipped
There is also https://github.com/google/nsjail
"It is still being assembled deep inside a mountain in west Texas. The Clock provides a rare invitation to think and engineer at the timescale of civilization. It offers an enduring symbol of our personal connection to the distant future."
Interesting fact that under the hood it's based on tANS introduced by Jarosław Duda from Jagiellonian University:
some cool references:
https://www.youtube.com/watch?v=uXtmN9fE01k
https://th.if.uj.edu.pl/~dudaj/
https://demonstrations.wolfram.com/DataCompressionUsingAsymm...
https://encode.su/threads/2078-List-of-Asymmetric-Numeral-Sy...
## my main motivation for developing `vulner`
1. learn rust by doing something tangible
2. improve security of funtoo linux (or gentoo, or any other distro that uses portage)
## my main motivation to share it on Hacker News
I'd like to gather some feedback related to (but not limited to):
1. user experience
2. potential improvements
3. source code (sth like code review)
... and maybe even get new users and/or contributors :)