zhenyavinogrdov

An example of putting one's public DNS server to a good use is Cloudflare's analysis of the recent Facebook outage effects https://blog.cloudflare.com/during-the-facebook-outage/

Lock files making you less secure is untrue. Using lock files does not mean your dependencies are not being updated, it means you have control over _when_ they are updated. Which means 1. you won't be stuck on a dependency update breaking your code while you are working on an unrelated feature, because you can work on adapting your code to the update independently, 2. you can check whether lock file update breaks the tests separately from testing your own changes, 3. with vcs you can retroactively investigate which dependency update caused a particular breakage or behavior change.

Allowing untrusted certificates for https, and showing just a warning for them, would make it impossible for websites to ensure that their traffic is not intercepted

The situation for installing haskell programs with nix is great, practically everything from hackage is available in the binary cache.