Hacker News: quicksilver03

New comment by quicksilver03 in "DynIP – Dynamic DNS with RFC 2136, IPv6, DNSSEC, and BYOD"

quicksilver03 — Sun, 31 May 2026 17:46:27 +0000

I'm interested to know the rationale behind the choice of AXFR to replicate zones, as opposed to database replication. Has this been always reliable enough for you?

Also, is the AXFR latency an issue or it stays always within your acceptable parameters?

New comment by quicksilver03 in "DynIP – Dynamic DNS with RFC 2136, IPv6, DNSSEC, and BYOD"

quicksilver03 — Thu, 28 May 2026 10:39:35 +0000

This looks interesting, I run PTRDNS https://www.ptrdns.net/ and some of the features I offer overlap with DynIP's.

I decided to use MariaDB as backend and replicate the data with Galera, I also built a proxy that sits in front of PowerDNS and allows per-account API keys (and hopefully someday per-zone API keys).

I'm curious to understand the rationale behind your architecture choices.

New comment by quicksilver03 in "DNS-Persist-01: A New Model for DNS-Based Challenge Validation"

quicksilver03 — Thu, 19 Feb 2026 10:47:26 +0000

PowerDNS has an API which is working pretty well, I've been using it to generate ACME certificates since a few years and I also built a DNS hosting service around it.

New comment by quicksilver03 in "European Alternatives"

quicksilver03 — Fri, 23 Jan 2026 20:28:15 +0000

I've been able to submit new entries to

https://eucloud.tech/

https://buy-european.net/

I've also found other problematic ones:

https://euro-stack.com/ (I couldn't understand how to submit a new entry)

https://www.goeuropean.org/ (all submissions fail with an AirTable error [sic] that the workspace is at the record limit)

New comment by quicksilver03 in "European Alternatives"

quicksilver03 — Fri, 23 Jan 2026 17:48:31 +0000

I've seen the same thing, the site accepts submissions but there's no one to either approve or reject them.

Unfortunately they did really well at SEO at one time, and more active alternatives appear far below in the search results.

New comment by quicksilver03 in "Local First Htmx"

quicksilver03 — Sat, 08 Nov 2025 13:31:41 +0000

I have an issue with

    The geneal idea of HTMX is that your HTML will be rendered by the backend — à la Server Side Rendering.

To me this phrase makes no sense, what's the thought process behind this meaning of "render"? The only place HTML is "rendered" is in a browser (or in a user agent, if you prefer).

New comment by quicksilver03 in "Cryptographic Issues in Cloudflare's Circl FourQ Implementation (CVE-2025-8556)"

quicksilver03 — Fri, 24 Oct 2025 07:59:54 +0000

Having seen some of those cases, I'd say it's rather because Bob in Finance doesn't want to be bothered with MFA and has raised so much stink with the CFO that IT has been ordered to disable MFA for him.

New comment by quicksilver03 in "JMAP for Calendars, Contacts and Files Now in Stalwart"

quicksilver03 — Thu, 23 Oct 2025 06:42:50 +0000

Can you share what's your solution for filtering incoming spam? I've had to abandon Stalwart because its spam filter is so ineffective and inconsistent.

New comment by quicksilver03 in "Red Hat confirms security incident after hackers breach GitLab instance"

quicksilver03 — Fri, 03 Oct 2025 08:10:48 +0000

That looks more like SOC2 than ISO-27001 though.

New comment by quicksilver03 in "Buypass Discontinues Issuance of TLS/SSL Certificates"

quicksilver03 — Mon, 18 Aug 2025 13:34:38 +0000

GoSSL certificates (using the ACME protocol) will also no longer be issued: https://community.buypass.com/t/y4y130p

Buypass Discontinues Issuance of TLS/SSL Certificates

quicksilver03 — Mon, 18 Aug 2025 13:34:38 +0000

Article URL: https://www.buypass.com/products/tls-ssl-certificates/discontinues-issuance-of-tls-ssl-certificates

Comments URL: https://news.ycombinator.com/item?id=44940419

Points: 3

# Comments: 2

New comment by quicksilver03 in "Nginx introduces native support for ACME protocol"

quicksilver03 — Wed, 13 Aug 2025 20:42:21 +0000

Is having one key per zone worth paying money for? It's on the list of features I'd like to implement for PTRDNS because it makes sense for my own use case, but I don't know if there's enough interest to make it jump to the top of this list.

HTTP/2: The Sequel is Always Worse

quicksilver03 — Sat, 09 Aug 2025 19:48:48 +0000

Article URL: https://portswigger.net/research/http2

Comments URL: https://news.ycombinator.com/item?id=44849523

Points: 7

# Comments: 0

New comment by quicksilver03 in "Nvidia won, we all lost"

quicksilver03 — Sat, 05 Jul 2025 11:53:08 +0000

The AMD drivers are open source, but they definitely are not good. Have a look at the Fedora discussion forums (for example https://discussion.fedoraproject.org/t/fedora-does-not-boot-... ) to see what happens about each month.

I have no NVIDIA hardware, but I understand that the drivers are even worse than AMD's.

Intel seems to be, at the moment, the least worse compromise between performance and stability,

New comment by quicksilver03 in "Why I no longer have an old-school cert on my HTTPS site"

quicksilver03 — Sat, 24 May 2025 11:34:32 +0000

Distribute your domain across 2, better 3 registrars, so if one does something stupid with your domains at least the others keep working.

New comment by quicksilver03 in "Show HN: Novanode, Global load balancing with Caddy, no vendor lock-in"

quicksilver03 — Thu, 03 Apr 2025 15:30:42 +0000

What technique are you using for redirecting traffic to region B when region A is offline? And what happens if I have 2 nodes in a region and one goes offline?

New comment by quicksilver03 in "Fedora 42 Beta"

quicksilver03 — Fri, 21 Mar 2025 17:23:04 +0000

That's an excellent example of what I like to call "good IT hygiene". I too would like to know what kind of tools you have to perform the functional and integration tests, and to execute the various rollouts.

New comment by quicksilver03 in "So you want to build your own data center"

quicksilver03 — Sat, 18 Jan 2025 08:51:27 +0000

> P.S., I swear the certification PDFs used to include this information (e.g., https://cloud.google.com/security/compliance/iso-27018?hl=en) but now these are all behind "Contact Sales" and some new Certification Manager page in the console.

This is not good, I can't think of any actual reason to hide those certificates.

For comparison, AWS makes their ISO-27001 certificate available at https://aws.amazon.com/compliance/iso-27001-faqs/ and also cites the certifying agent, most of which have a search page from where you can find all the certificates they've issued.

New comment by quicksilver03 in "Datadog acquires Quickwit"

quicksilver03 — Sat, 11 Jan 2025 14:49:38 +0000

I'm using Vector for my own infrastructure and at work, at the time it seemed the best option to ship logs to various destinations. Are there any alternatives?

New comment by quicksilver03 in "I automated my job application process"

quicksilver03 — Sat, 28 Dec 2024 19:06:48 +0000

I'd prefer an application to automatically fill in my data in those junk ATS systems, such as WorkDay, that pretend to parse my LinkedIn profile or a PDF resume and inevitably makes me do all the copy-paste twice.

A couple of years ago it was so bad that I stopped applying as soon as I saw that WorkDay crap pop up, regardless of the company.