mholt

Well, we drink almond milk mostly, and it keeps for 2 weeks. A lot of our meat is frozen unless we're planning a special meal. Some fruits and veggies are a bit tricky, sometimes we make a quick trip to get some fresh produce, but between some produce keeping well on the counter, and others in the fridge, they last a week or so.

Bread keeps long enough, unfortunately thanks to preservatives. "Homemade" (can't believe that label is allowed on factory-made food here) bread lasts a little longer in the fridge. But all bread I know freezes well, so we thaw it when we're ready to it the loaf, and it's gone within a few days.

We also live in a dry climate in the mountain west. I don't think we could get away with this in a wet climate.

Totally armchairing this thought, but:

My understanding is that it's much more common for Europeans to live in or close to cities, or at least walkable neighborhoods, than it is for Americans; and I have this idea that Europeans often will get groceries more often, even daily, since they are often a short walk away. And European dwellings are typically more compact, so there's less storage.

The typical American experience is driving 20 minutes to a superstore (basically a huge warehouse with price tags on every shelf -- an order of magnitude larger than most European supermarkets), stockpiling food for a week or more in walk-in pantries. A month of food is not uncommon here. I think our family goes to Costco and Walmart every 2-3 weeks or so.

So maybe this preparation directive is more relevant to Europeans who typically have smaller dwellings (less storage space) and more fresh food on hand? (I envy it!) Because when I read it, I'm like, "Yeah, most American homes have this already."

Our family also has "go bags" that are ready with about 1 week of portable supplies (food, clothing, light shelter, etc) and a stockpile of food at home, with long shelf lives, in case of any number of events that may disrupt supply chains for months...

In a lawsuit in the early 2000s where my family member was the defendant, the plaintiff had forged emails. In the end, my family member won the lawsuit, so whatever they did, worked! I wish I could remember the details. I will have to go back and ask them how they did it.

Tangential question, as I am not an economist and don't pretend to understand any of this: what would happen if the stock market didn't recover? (Surely, it could happen? Past performance is no guarantee of future results.)

The economy would effectively collapse, and I imagine our currency would be mostly worthless. People would withdraw what they could from bank accounts, which wouldn't be able to produce all the funds, so FDIC insurance would kick in, effectively printing money, but the economy has collapsed anyway?

^ That's just my intuitive speculation. I can't really grasp the scenario of stocks never recovering. Anyone with some education/background have a good explanation? (Not sure I want to trust AI with this question.)

I have that printer, and I was about to buy some third party toner for it (first time). What firmware version disabled third-party toner support? Looks like we have 1.35. I just disabled automatic "check for updates" but maybe it's too late.

I still don't understand the iPad lineup.

What is the point of iPad Air? It's compatible with the latest Apple Pencil, but iPad isn't, but iPad Pro is, and the Pencil Pro is only compatible with iPad Pro, iPad Air (not M1), and iPad ... MINI (not iPad). (Edit: Actually the Apple Pencil for our iPad Air M1 isn't even sold anymore, I guess?)

The Apple Pencil USB-C compatibility matrix is even more confusing.

Why is this division of Apple run like Google's messaging apps?

Awesome :) Best of luck with the project!

No illusion of privacy.

Caddy also has try_files. But it's implemented differently.

Plugins (modules) are compiled in statically.

Huh, sorry that it was that difficult. Based on what you wrote, this should suffice:

    example.com
    
    root /etc/www
    reverse_proxy /backend/* 127.0.0.1:8080
    file_server

Yeah. ZIP codes are sets in the abstract-dimensional space of carrier delivery points. I suppose you could think of them as lines, but definitely not polygons.

"Other attacks" are much more expensive and for much less gain.

It does.

True, but it doesn't matter since competent clients should be falling back to other CAs anyway.

I don't know much about CT requirements, but can't they prune data out of their logs after some time? Since the certs only last 6 days, the growth of the logs can be capped at some point right? If not now, provisions for such operations could surely be implemented, I imagine.

PS. Neat site!

Fortunately, most ACME clients, including my own, support other CAs as fallbacks. (Caddy's ACME stack falls back to ZeroSSL by default, automatically.)

That, and extended week-long outages are extremely unlikely.

ZeroSSL I think will get you IP certificates with their cheapest plan. (Disclaimer: I work on Caddy, which is a ZeroSSL project; but I do so independently.)

Oh, my, yes it is :) (I don't have time to elaborate on this again right now, unfortunately.)

AFAIK, Caddy is the only integrated ACME client that is tuned for short-lived certificates. All its own self-signed certs are already 24-hour certificates, so 6-day certs will be no problem.

That's the thing. We don't always know. Hence the need to reduce the attack lifetime.

Caddy/CertMagic/ACMEz already support this in the latest commits. Should be ready in time for the production rollout!

Yeah... thankfully, it's "pretty simple" for clients to implement. Just add a JSON field to your payload and that's it. (There's a little bit of error checking logic and input validation, like making sure the value is valid, but overall it's not too complex, unlike ARI, which is much more work.)

Not OOM. (I have 128 GB. Using... 7. lol)

We've had a hard time getting Nurtec. (Is expensive, not to mention the hoops to go through to get it.) Worth the hassle then?

Hey Anders; Francis notified us of this today. I didn't realize a proper type had been created. We'll update our code.

This begs the question, is it a meme if it is not seen?

We have a local SAR team that uses radios, and even emits APRS beacons. (I've received them several times.)

They're trying to get current M1 users to upgrade.

> - Caddy plugins mean I have to download xcaddy and rebuild the server. I really do not want to rebuild services on my servers just because I need a simple layer 4 reverse proxy (e.g. so that I can terminate TLS connections in front of my IRC server).

I mean, you don't havse to "rebuild services" -- if you need the plugin, just deploy the binary with the plugin. It's not like it changes (other than upgrades, which you'd do regardless of the plugin).