965 karma · joined November 30, 2017
Here's ß capitalised: ẞ
Bad example, but you're otherwise correct. My personal pet peeve is systems mangling names with umlauts. Such names used to be common in my country, but they've become pretty rare now with globalisation likely to blame. But a workaround nowadays seems to be to give two different first names: one that has no special letters and another with.
Did the outgoing emails for the site ramp up fast? Did you only encounter issues with Gmail or with other big providers too?
I wonder if the same caveat applies to other providers that have improperly implemented IPv6 by not providing a /64.
A huge number of them being on IPv6-only mobile networks using NAT64 to access the old Internet.
IDA 7.4 introduced a new structure editor, arguably better Ghidra's. [1]
And they've had it in few select residential areas as a trial since 2018 autumn [1].
[1]: https://www.dslreports.com/forum/r32136440-Networking-IPv6-w...
But IIRC, you can fetch GitHub Pages custom domains over IPv6 with HTTPS too, but you don't get the correct certificates, because they simply don't have an IPv6 range pointing to the newer HTTPS-supporting infra.
[1]: https://github.com/isaacs/github/issues/354#issuecomment-385...
news.ycombinator.com 2606:4700::6810:686eI run my own email server and don't do any spam filtering, so I definitely receive more spam than others (0–2 per day), but Thunderbird always puts them into my spam folder.
I hope to eventually add a spam filter in Postfix to deny at the SMTP level. However, configuring DMARC verification and requiring proper RDNS already cut the spam to a third.
I also recently switched to the hexadecimal encoding explained by u/bitmedley on my website. There's been no perceptible change in spam from that.
Properly configured mailing lists shouldn't modify contents of emails causing DKIM to fail.
I personally use Linode and would recommend them. But basically any tier 1/2 provider, i.e. too big/popular to block, will do. However, I would avoid DigitalOcean per my experience due to them completely blocking SMTP on IPv6 in addition to badly implemented IPv6 support and seemingly subpar support.
* Enforce a DMARC policy instead of explicitly disabling it.
* Enforce a strict SPF policy instead of ~all.
* Send over IPv6. Usually stricter rules are applied and not-up-to-snuff emails are rejected at the SMTP level.
* Your provider hosts lots of spammers for their size. Consider switching.
* Enable MTA-STS.
The first two I'd consider obvious glaring mistakes. The next two are less important, but would help. MTA-STS is a nice-to-have.
I can't analyse your DKIM setup, since I don't know your selector. Feel free to send me a sample email if interested.
[1]: https://www.theverge.com/2018/11/30/18120577/valve-steam-gam...
However, if you want to actually use HN over IPv6, then force it in your hosts file:
news.ycombinator.com 2606:4700::6810:686e
This comment's written over IPv6. :)Applying this fix to all other functions would certainly bloat the binary due to unnecessary padding and likely reduce performance for all, since the shipped binary is same for everyone.
They do solve archive.is. But archive.is's DNS servers have been configured to return bogus answers to queries from Cloudflare's servers.
I suggest you have a second look at the HN guidelines [1].
Slack doesn't have a native version, does it? They have a desktop client, but that's just the web version wrapped inside Electron.