alberts00

As far as I'm aware there was no technical solution for key revocation when the EU Covid Certificate was first launched in July. The only possibility I saw for revocation was to revoke the whole CA, instead of e.g CRL check.

Can you elaborate what makes you think that key revocation is built into the system?

AWS Elasticsearch was one of the last services which didn't support VPC until late 2017 [1], moreover if you had created a cluster without VPC support the migration is very cumbersome and application changes (to enable double writes) are required to execute it without any downtime [2].

[1] https://aws.amazon.com/blogs/aws/amazon-elasticsearch-servic...

[2] https://medium.com/@vishnunarang/how-to-migrate-elasticsearc...

It might as well be an employee whose devices were compromised.

HaveIBeenPwned now has feature set to find e-mail addresses which were breached under a domain, there is normally no need to search for separate aliases if you own the e-mail domain.

https://haveibeenpwned.com/DomainSearch

Same situation here, I was logged out of all sessions and did not receive any notice.

There are countries in EU where that is not the case. I do not think this is an EU policy.

I have been going through Cisco Netacad materials for last 2 years and I've seen 1.1.1.1 in examples. Though I just did a search and did not see 1.1.1.1 mentioned anymore.

It's inquired when you first register for GCP. If beforehand you've selected EMEA country there will be no option to choose between personal/business.

GCP support did respond to my inquiry and they specified that it's the case in whole EMEA.

P.S I just tried and it appears they've added option to switch to "Individual". Great!

You do need to register as a business if you are located in EMEA. There is no private/personal option. This is a huge showstopper for me and, in my opinion, anyone who wants to use it for educational purposes.

Seems to work now.

Mind explaining this further?

I am currently running an Nginx server which is using PAM service, which in turn is configured to authenticate against LDAP via pam_sss. I don't really see the use case having Nginx authenticating directly to LDAP.

  You should only use T2 instances within an auto-scaling group.

Could someone please elaborate? I always thought this is a horrible idea because upon CPU credit exhaustion the AWS metrics show CPU utilisation including the burst. For example, if you run out of CPU credits for t2.micro it will show around 15% in AWS whilst on the instance itself you will see 100%.

If you are running the AWS ACM certificate at the time when the old one is close to expiration it will automatically renew it without user intervention. http://docs.aws.amazon.com/acm/latest/userguide/configure-do...

It seems like Google Cloud free trial in several countries (at least in LV,LT,EE) is only available to businesses.

I wanted to give the free trial a go, but wasn't able to register because it did not let me choose account type as "individual".

Route53 doesn't allow using it as slave DNS. https://forums.aws.amazon.com/thread.jspa?threadID=56011