deleted by creator

What a surprise this guy is having trouble with marketing

I respect that

I wonder what the overlap is between people interested in self hosting computer services and people who are interested enough in fashion to want to catalog their clothing in an app. I’m in bubble A and not bubble B, but it feels like cataloging stuff you put in your fridge so you can make recipes instead of just looking in the fridge.

I’m not concerned about it personally, but you are putting a lot of trust in them as a 3rd party service provider. It’s up to your specific risk profile if that’s acceptable risk or not.

The alternative would probably be self hosting a vpn yourself with dyndns to handle ip address resolution. I’m biased (I have a professional networking background) but I don’t think it’s that much harder to setup either. But then I’m also a hypocrite and don’t self host anything anymore.

There’s also a valid argument to be made that doing it yourself is riskier because novices make mistakes. I don’t think this is too big of a concern personally - it’s not like you’re rolling your own cryptography.

Just as much as Tailscale is self hosting. Tailscale is probably more concerning from a security point of view.

I’d skip Active Directory but the rest seems reasonable.

Doing it all through infra as code and using ci/cd tend to be the most “devopsy” things.

I’ve never understood the point of postman. I usually just use curl

This is the way to go. Do a simple website that says “hello world” then add all the other infrastructure around it until it’s a real webpage accessible on the Internet. Only then should you move onto something complex like mbin. Don’t skip the basics

Works fine in Firefox on Android

Haven’t found one that’s as good yet personally…

I had it working on a 5700xt a couple years ago

I’ve never heard it called anything but mTLS. :shrug:

Docker is fine for turnkey applications. Mounting external storage that persists across containers is a feature that enables that pattern.

Running Docker in a VM is also fine and has potential advantages. However I agree that it’s probably overly complex for many people.

I’m confused what you’re trying to accomplish here. Are you trying to make it look like the traffic is coming from your VPS for some reason? Nginx (amongst others) can reverse proxy tcp traffic.

This is basically “the first hit is free”

deleted by creator

Yeah you can still do a lot of damage in a few hours, but 45 days is a meaningful reduction in exposure time from year+

That’s a complaint about those phones not PKI in general then. Though it’s surprising their enterprise support won’t let you since that is (or was) a fairly common thing for businesses to do.

Isn’t this just CRL in reverse? And CRL sucks or we wouldn’t be having this discussion. Part of the point of cryptographically signing a cert is so you don’t have to do this if you trust the issuer.

Cryptography already makes it infeasible for a malicious actor to create a fake cert. The much more common attack vector is having a legitimate cert’s private key compromised.

Browsers are only a (large) fraction of SSL traffic.