devvvvvvv

CEO of my company is doing essentially this - definitely good to see.

Thank you for clarifying. That is indeed much more worrying.

If we were able to guarantee NO certificate authorities used WHOIS, this vector would be cut off right?

And is there not a way to, as a website visitor, tell who the certificate is from and reject/distrust ones from certain providers, e.g. Digicert? Edit: not sure if there's an extension for this, but seems to have been done before at browser level by Chrome: https://developers.google.com/search/blog/2018/04/distrust-o...

Entertaining and informative read. Main takeaways for me from an end user POV:

- Be inherently less trustworthy of more unique TLDs where this kind of takeover seems more likely due to less care being taken during any switchover.

- Don't use any "TLS/SSL Certificate Authorities/resellers that support WHOIS-based ownership verification."

We do know. Tesla wins, obviously in the US, and apparently also in Europe:

https://i.imgur.com/ZNv1AyD.jpg

https://imgur.com/56eG7CN

Could it change? Maybe. But right now Tesla is the most popular EV in the US and Europe.

Importantly for anyone who dislikes ads: seems to support Firefox too

>Compared with SpringBoot in java, spring-rs has higher performance and lower memory usage, allowing you to completely get rid of the bloated JVM and travel light.

My HelloWorld program also has higher performance and lower memory usage than SpringBoot. Rust moment.

Very cool. A lot to be said for jumping right in to the action. This is a perfect demonstration of that "law" that states you can skip the first 30% of a YouTube video and not miss much.

Why does Section 230 not apply to advertisements as it does to comments, videos, etc? The ads are user generated content.