mrl5
Re:TLS certificates for internal services done right
on Friday July 10, 2026 @10:25AM (#48860429)
TIL, thanks! This makes dns challange automation more approachable for me. I always had an issue with API keys which scope can't be limited to TXT records. This seems to be a nice workaround
... and it is even already documented at https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo...
Re:TLS certificates for internal services done right
on Thursday July 09, 2026 @04:57PM (#48852262)
OP here. Actually I tried to use it but apparently prematurely -> https://github.com/acmesh-official/acme.sh/issues/7085#issue...
Once it's supported I think my next iteration will be DNS persist + internal ip addresses on the public zone.
Thank you all for comments and feedback! It's cool to see real interest in this blog post
Re:TLS certificates for internal services done right
on Thursday July 09, 2026 @10:57AM (#48846996)
I've documented how to securely set up TLS certificates for internal services without creating TLS issues for http clients downstream. All thanks to split-horizon DNS, WAF and ACME protocol. All for free!
Re:Rearchitecting: Redis to SQLite
on Wednesday September 25, 2024 @03:46PM (#41651128)
Thank you. First explanation what might be the root cause :)
Re:Ask HN: What tools should I use to manage secrets from env files?
on Tuesday September 24, 2024 @04:32PM (#41640616)
This is an interesting alternative to password manager, esp. if you want to version control your secrets
https://github.com/getsops/sops
System Logs Aggregation with Postgres
Re:Neon: Comparing type-safe SQL libraries for TypeScript
on Friday August 04, 2023 @11:42AM (#37001551)
I wonder why pgtyped [1] was skipped
Re:Firejail: Light, featureful and zero-dependency security sandbox fo...
on Tuesday July 11, 2023 @11:40AM (#36682540)
There is also https://github.com/google/nsjail
Re:The Clock of the Long Now
on Saturday July 08, 2023 @02:43AM (#36641961)
It is still being assembled deep inside a mountain in west Texas. The Clock provides a rare invitation to think and engineer at the timescale of civilization. It offers an enduring symbol of our personal connection to the distant future.
The Clock of the Long Now
Re:USB armory – small secure computer from WithSecure (previously F-se...
on Saturday June 03, 2023 @03:32AM (#36174514)
Re:Zstandard – Real-time data compression algorithm
on Sunday September 04, 2022 @04:26PM (#32717354)
Interesting fact that under the hood it's based on tANS introduced by Jarosław Duda from Jagiellonian University:
some cool references:
https://www.youtube.com/watch?v=uXtmN9fE01k
https://th.if.uj.edu.pl/~dudaj/
https://demonstrations.wolfram.com/DataCompressionUsingAsymm...
https://encode.su/threads/2078-List-of-Asymmetric-Numeral-Sy...
Re:Show HN: Vulner – discover CVEs for packages installed by the portage
on Friday June 17, 2022 @03:52PM (#31783392)
## my main motivation for developing `vulner`
1. learn rust by doing something tangible
2. improve security of funtoo linux (or gentoo, or any other distro that uses portage)
## my main motivation to share it on Hacker News
I'd like to gather some feedback related to (but not limited to):
1. user experience
2. potential improvements
3. source code (sth like code review)
... and maybe even get new users and/or contributors :)