176 karma · joined August 18, 2012
The layer-3 stuff however is still early days and I can't recommend getting the secure gateway at this time. No IPv6 support. Depends strictly on an internet uplink configuration for default route to which all traffic is then NATted. Can't change that. No real security features, no packet inspection etc. The routing features really feel like an alpha version. They are working on it and have a roadmap to a more workable layer-3 solution. So maybe in the future the will be as nice as the Ubiquity solution.
Cloud is not needed but possible. You can get an OC-200 controller for not much money that fills the role of single pane configuration webinterface. The software for that controller can also be downloaded for Linux on PC or ARM if you want to use your own hardware. Also the network keeps running if the controller is down.
But with DANE TLSA Resource Records you can pin a public key to a website. Alas the implementation of TLSA-RR checking in browsers is dependent on extensions at this time. I wish it was native in browsers with a big red sign when violated. When done in combination with DNSSEC it's very hard to fake certificates. Or more precisely asymmetric cryptography key pairs used by servers. Certificates for TLS would not be needed anymore if TLSA-RR's were standard practice. A company might still use a certificate to attest it's identity beyond internet domain ownership.
Edit: This is for TLSA 3 1 1 and 3 1 2 records. That's what I have experience with. Just read on Wikipedia a lot more is possible with TLSA-RR's including certificate and CA pinning. https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na...
Apple only forces their software on hardware they manufacture themselves. If you want other software, just buy hardware made by a different company. There are still many of them.
Shooting down ideas is not productive. Making sure ideas are realizable is.
I found it a weird analogy because I couldn't figure out who are supposed to be the Spaniards. Is it Google because they are up against a competitor that is massively entrenched in the office suite market ? Or is it Microsoft because they seem to be expanding their presence.
Since latency to the moon is more than 2.5 seconds round trip I think the utility of moon based data centers will be marginal. Maybe as off site backup site or big batch processing.