signed-log
Issue is that it increases friction and you need sudo anyways to set the capabilities.
Most web servers would happy to run unprivileged with only CAP_NET_BIND_SERVICE
It's another example of EEE (Embrace, Extend, Extinguish), as they finally succeeded with Chrome. And there is likely quite a lot of political interference.
And no, it has nothing to do with the lack of vertical integration. Microsoft, despite all the millions of issues with the platform, has succeeded in making an ecosystem on the enterprise side despite having very little to say in the PC hardware.
And that's even if you are innocent on the underlying charge or search.
Encryption in this political climate, is a pick your poison.
- Either you go to jail for years but you know your gov and other actors has no access to your data.
- or you store on remote/proprietary apps, stay free, but your gov or other actors may or may not have access to it.
At that point, China is as good as any, for not batting a rats about western copyright, so bad the hosting would be a little bit complicated.
I'd be very happy to receive any feedback about this and envision that the script would grow more modular regarding DNS APIs and not stay bound to Cloudflare.