I have a little terminal llm thing that has a --bofh switch which make it talk like the BOFH. Very refereshing to interact with it :-)

The only thing that ever really worked for me is taskwarrior.org. It is super easy to get started and can be made more sophisticated as you. I live in the terminal most of the time anyway so that makes it a natural fit.

> I never heard of any certificate authority offering that.

DigiCert does. That is where 1.1.1.1 and 9.9.9.9 get their valid certificates from

Most CAs offer them, the only requirement is that it's at least an OV (not DV) level cert, and the subject organization proves it owns the IP address.

No, it is not DNS over HTTPS it is DNS over TLS, which is different.

Android 11 and newer support both DoH and DoT.

Where is this option? How can I distinguish the two, the dialog simply asks for a host name

Google is one of the most valuable brands ever. Everyone knows it. It is even used for "searching the web" openai is not that strong of a brand

I think for the general public ChatGPT is a much stronger brand than OpenAI itself.

Google is a far bigger brand than ChatGPT and OpenAI combined.

Load on the underlying infrastructure is a concern. The signing keys are all in HSMs and don't scale infinitely.

How does cycling out certificates more frequently reduce the load on HSMs?

It's all relative. A 47-day cycle increases the load, but a 48-hour cycle would increase it substantially more.

Much of the HSM load within a CA is OCSP signing, not subscriber cert issuance.

The authors are Chinese so they may simply use AI to make it sound right in English

I had a Chinese co-worker and something like this was actually his style of writing, no use of AI, because I was sitting next to him few times when he was writing documents.

ArchiveTeam is working on everything US-Government and you can help https://tracker.archiveteam.org/

https://wiki.archiveteam.org/index.php/US_Government

How can I run this as non-root? This is not obvious to me.

Based on how it works it cannot run as non-root even in principle. https://github.com/monasticacademy/httptap?tab=readme-ov-fil...

Correction: the readme claims it will work without requiring root, but it does need to manage network namespaces, which afaik may only be available to root users depending on system configuration.

> To run httptap you do not need to be the root user. ... It makes use of linux-specific system calls -- in particular network namespaces ...

Zero Trust is a marketing label that executives can seek out and buy a thing for because it is super-hot thing to have these days. That's mostly it.