Hacker Timesnew | past | comments | ask | show | jobs | submit | naraniano's commentslogin

Is it expected from all CAs that they obey CAA records, or is it something just made up by the community to crush the big CAs? I see an RFC from just a few years ago, and I'm not sure how these things are standardised.


Standardization goes through the CA/B forum. There was a ballot voted to make CAA checking mandatory for CAs[1], and COMODO voted yes for it.

Any CA that issues certificates publicly need to check CAA from the 8th of September onward.

[1] https://cabforum.org/2017/03/08/ballot-187-make-caa-checking...


Ah, so they are three days late. That doesn't sound too serious.


On a requirement they voted for half a year ago for a standard specified 5 years ago. It's sloppy and sloppy is not a property you want in a certificate authority.


From experience working with them, sloppy is an excellent way to describe Comodo.


Three days is quite a long time to be late, so I'd hope someone over there is getting a reprimand, but yeah, it's also not a disaster. They're response and time to remedy this will be more telling I think.


Three days over a weekend, though. Context matters. Even if it's the most critical incident, you can't force employees to work outside of business hours.


The ballot was in March, so they have 6 month to prepare for it, not only 3 days to implement a surprising change.


Except they claimed to support it a long time before this. It’s not that they were late, it’s that they lied.


That makes no difference as to when the three days where. I never made any claims as to why it's late or them lying. I merely clarified that the three days were over a period where people don't usually work.


Karunamon et. al. are not saying your point is wrong; they are saying it is irrelevant, and if their facts are correct then they are right.


It's not about them being late these 3 days. It's about them lying about having already implemented this months ago.


How do you know they lied? What if they implemented it but simply did not flip the switch?


'Lie' is indeed a strong term, informally suggesting an intent to deceive. Personally, I would suspect negligence and incompetence rather than deceit, but negligence is a serious matter here.


Given the general crappiness of the CA industry, my first instinct is to say they willfully said "yeah we support it" without actually doing it first, knowing that it wasn't actually done.


These 3 days don't matter when you have months of lead time.


I wonder about what else is Comodo being "not too serious" while they promise to be "super serious" about them in their marketing campaigns?


> Is it expected from all CAs that they obey CAA records, or is it something just made up by the community to crush the big CAs?

CAA was made up by... drumroll.... Comodo.

Yes, check the authors on the RFC: https://tools.ietf.org/html/rfc6844


Image macro memes in 2017 is like putting fingers down my throat.


It's the iPhone X, which is supposed to be the end of the line. The iPhone 8 will be priced as it has always been.


Mozilla is biased (towards open internet, liberalism, etc) so evidently this is an opinion piece--they are asking us to stop something they don't agree with!


what/where is the something?


They explain it in TFA: https://changecopyright.org/en-US/


It's the same propaganda with no actual quotes from the proposed laws they are opposing.


You remind me of a friend who, as an excuse for having bought a mobile with shit battery, used to say: "well this way I don't look at it that much!!!". Bollocks.


Windows since the Creators Update also does multiple displays and DPIs right.

By the way, support for that is completely non-existant on Linux.


"that" as in multi-monitor support? Multi-monitor works fine on my Plasma desktop since at least 2012. Can't comment on high-DPI, but from what I've heard it's in the "getting there" stage.


Multi-monitor works fine. Single monitor, high DPI is very tricky, and barely works, never consistently (like, GNOME looks fine, but Firefox looks tiny). Multi-monitor, where every monitor has a different DPI value, has absolutely no support.


I am using my Dell XPS 13 with a resolution of 1920x1080 (scaled from 3200x1800) for the internal display and an external display with native 1920x1080 and cannot confirm this. It works pretty well (GNOME3, Ubuntu 17.04). Firefox is not tiny. I did not change anything in my X config files.


You mean you changed the resolution of your internal screen with xrandr? Or does xrandr still report 3200x1800? If not, then this is not a HiDPI setup. HiDPI is (basically) when applications draw using internal coordinates that are not "1 screen pixel per logical pixel", but more than that.


No, I just changed the "Display settings" (right click on desktop) to 1920x1080.

xrandr reports the following:

Screen 0: minimum 320 x 200, current 3840 x 1080, maximum 8192 x 8192 eDP-1 connected 1920x1080+1920+0 (normal left inverted right x axis y axis) 294mm x 165mm


Let's see if you shed a tear when a car breaks and city hall (this is, all the citizens, including you) has to pay for it.


These are installed in areas with speed limits at walking speeds. So if you're driving fast enough to damage your car and then seek damages, the best thing will that might happen is that they'll laugh you off. The worst thing is that you'll loose your drivers license. (No tears shed either)


Maybe where you live. In the Seattle area[1], speed bumps are frequently installed on residential streets where the actual limit is 25-30 miles per hour (40-50 kilometers/hour using non-legacy units).

It's typically done in "problems areas" where a small number of people drive 25-50% or more over the limit, but it's extremely frustrating, because it forces drivers to drive way below the actual limit when crossing the speed bumps - especially if they're the bolt-down kind. i.e. the effect is to cause irritation for ~99% of drivers in order to punish a tiny minority.

[1] I'm sure it happens elsewhere in the US, too.


So if this kind would be installed, then they'd be soft at regulated speed and only solid at speeds significantly exceeding those. I doubt you'd be able to sue the city for breaking your car then - you have been warned. Still, no tear shed.


Being Spanish, I know someone will stab those with a knife or a screwdriver the first day they are installed. That someone might even be me.

I mean I'm happy they are proud of their invention but, please. Don't make me laugh.


How many public lighting bulbs and metro card readers have you broken recently? Those are all more fragile than this.


None, because nobody hates lighting bulbs or metro card readers, while every driver hates speed bumps.

Well, maybe not all drivers, but one driver who hates that damn speed bump that he has to drive over every day is enough to make that baby bleed. :)

I'm just being realistic. I've lived in an impoverished area all of my life and I know how things here work. I'm saying what I honestly believe would happen with these.


You might be right that they'd be vandalized. I expect you're getting down votes largely for suggesting you'd do it yourself.


What I meant, although I guess it wasn't clear, is that from my own experience a vandal is many times not what you expect him to be. Sometimes, he's some guy with glasses who posts on Hacker News. And sometimes, that vandal is not a he, but a she. I've seen it all. :)


I really appreciate the brutal honesty of your initial comment! Of course there is a vandal in every single one of us and those who say otherwise (or downvote) are in denial.


That may be true of many, but certainly not everyone. I find most vandalism to be pretty morally reprehensible, since it does damage to another person or to society as a whole, for no benefit besides momentary enjoyment. I have significantly more compassion for a thief than a vandal. (Of course, these feelings would be somewhat proportional to the degree of damage caused.)


I was actually thinking it's a brilliant application but no where near durable enough to be practical.


x2.

Put one in a rural area and eventually someone will come along and shoot it.

That's what happens to absurdly low speed limits and moronically placed stop signs. I don't see why a speed bump would be any different.


And that's why we can't have nice things.


Add a fine mesh and connect the mesh to electricity like a cattle fence. Insert screwdriver and... ZORCH! Muahaha.


what screwdriver are you using that has conductive handles?


Like this one I get every now and then across all of their services? http://i.imgur.com/f5NS6GQ.png


Or this infuriating one that hijacks page scroll so it's almost impossible to get to the mobile site: http://imgur.com/a/tNVoP


Or this one for search: https://imgur.com/a/gwrjX


I wouldn't call that an ad. Nor would I condemn Google occasionally reminding users to check their privacy settings. In fact, I encourage it.


That's not google reminding you of privacy settings (in fact if you want to change those this menu is highly impractical with a lot of nesting). This is google making you agree with their T&C to go any further.


Isn't that effectively a legal requirement? That users must make some sort of actual confirmation step to acknowledge the terms for them to be legally enforceable?

I mean, look at my submission/comment history, I'm literally the voice of Google criticism on this website. But it's hard to see how this little diversion has to do with pop-up ads. It's not advertising, first and foremost.


I don't know of any websites that force me to agree to a privacy policy so I can access it while logged off.


Most websites aren't being fined billions by your government!


Particularly when you flush cookies and data on the browser session closing


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: