dan

@dan@upvote.au

• ⁨Comment⁩ on ⁨Which domain registry or specific TLD do you prefer, and why?⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  legacy tlds (com, net, org) tend to be more affordable

  Verisign are trying their best to make .com and .net less affordable. Their contract with ICANN is on a six year cycle, and it lets them increase the price by up to 7% for the last four years. So far, they’ve always increased it the maximum amount.

  Wholesale price has gone up from $6 in 2000 to $7.85 in 2020 (before this contract structure), to $10.26 now, and they’re increasing it to $10.97 on November 1.

  Having said that, it’s still better than ccTLDs and newTLDs, where the registry can increase it as much as they want.

• ⁨Comment⁩ on ⁨Anyone using 6-day certs yet?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Makes sense! I didn’t realise it has a UI.

  I’ve got a bunch of snippets in /etc/nginx/snippets/, so for example I just need to add include snippets/proxy.conf to a server block to add most of the configuration needed for a reverse proxy. I’ve been using Nginx for long enough that I just write the rest of the server block by hand.

• ⁨Comment⁩ on ⁨Anyone using 6-day certs yet?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  I’m just using regular Nginx, which I’ve been using for 20 years. What does Nginx Proxy Manager or npmplus do better?

  I’ve been meaning to try Angie too, which is a fork of Nginx.

• ⁨Comment⁩ on ⁨Anyone using 6-day certs yet?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Caddy is a good piece of software.

  I’ve been using Nginx for 20 years and don’t really have a reason to switch, so I’m still using it. I use certbot, so it’s just one command to create the certificate initially, and then it auto-renews automatically via a systemd timer.

• ⁨Comment⁩ on ⁨Paramount+ unskipabble ads⁩ ⁨⁨2⁩ ⁨years⁩ ago⁩:

  Same can be done with Pi-hole. Yes it isn’t ootb, but it is easy to do.

  I’m surprised they don’t use it by default though. People usually use solutions like PiHole and AdGuard Home because they want to configure it via a UI rather than at the command line, so needing to do extra manual command-line steps to get DoH working with PiHole isn’t ideal.

  Pihole is fully for free. AdH seems to be the same for now, but it is a company running it, they want to make money. I would be a bit worried about this.

  AdGuard Home is licensed under GNU GPL. They can’t relicense it unless they get permission from everyone that’s contributed code (and if anyone disagrees, their parts must be deleted or rewritten).

• ⁨Comment⁩ on ⁨Paramount+ unskipabble ads⁩ ⁨⁨2⁩ ⁨years⁩ ago⁩:

  hdhomerun

  No DRM

  Until ATSC 3.0 is forced on everyone, at least if you’re in the USA :/

  ATSC 3.0 is the next version of the protocol used for over-the-air digital TV in the USA. It uses H.265 instead of MPEG2 which allows for 4K TV at similar bitrates to what 1080p uses today.

  However, it also supports DRM and encryption, and all the major networks are already encrypting their broadcasts. TVs need an internet connection to get the decryption key, and can’t store it in a decrypted format.

  www.youtube.com/watch?v=NNTc5OWrDic

  If you rely on antenna TV, please write to the FCC in opposition of the encryption: blog.lon.tv/…/the-fcc-responds-to-my-atsc-3-encry…

  If you’re not in the USA… Just ignore me lol

• ⁨Comment⁩ on ⁨Paramount+ unskipabble ads⁩ ⁨⁨2⁩ ⁨years⁩ ago⁩:

  AdGuard Home is better than PiHole since it supports DNS over HTTPS out-of-the-box, which prevents your ISP from inspecting and modifying your DNS requests/responses. The ISP can do that even if you’re using a custom DNS server, since regular DNS is unencrypted and unauthenticated.

  By default it uses Quad9 via DoH.

• ⁨Comment⁩ on ⁨Once again, I am calling on manufacturers to improve their sealing glues⁩ ⁨⁨2⁩ ⁨years⁩ ago⁩:

  BBB is mostly just Yelp for boomers.