Hacker News: weddpros

New comment by weddpros in "German implementation of eIDAS will require an Apple/Google account to function"

weddpros — Wed, 08 Apr 2026 02:39:54 +0000

eIDAS tends to hear "our European Sovereignty" when they hear Self-Sovereign.

You can't have a government issue a Self-Sovereign identity to you, it's an oxymoron. They can only issue credentials. But then they'd feel like they're losing control, so they pervert it. Now they call it SSI but it's just digital credentials.

The very title says it all: German implementation of eIDAS will require Google or Apple ID. That's not self-sovereign identity.

And that's why I find it lame.

New comment by weddpros in "German implementation of eIDAS will require an Apple/Google account to function"

weddpros — Wed, 08 Apr 2026 02:33:15 +0000

I agree, and that government ID isn't your identity, it's just a piece of it.

I'm not arguing against government ID, I'm saying identity doesn't have to be that piece of paper, or that Google ID.

Analogy: if google ID is your primary key in your User table, then you're cooked. Instead use a uuid for the PK, and add Google ID as just another id. But the identity is the PK.

New comment by weddpros in "German implementation of eIDAS will require an Apple/Google account to function"

weddpros — Sun, 05 Apr 2026 08:13:51 +0000

Self Sovereign Identity (aka SSI) is the only way out of those identity sovereignty issues. It shouldn't be acceptable that your identity depends on anything or anyone. It should just be your identity.

A paper or certificate can prove an entity trusts your identity to be but that shouldn't be your identity.

You just are. Not your google Id, not your Apple Id either of course.

Governments are lame.

New comment by weddpros in "Europe's $24T Breakup with Visa and Mastercard Has Begun"

weddpros — Wed, 11 Feb 2026 05:15:49 +0000

Hosted on Amazon and Digital Ocean from what I can tell

New comment by weddpros in "Ezs3.net to share S3 access in your team"

weddpros — Fri, 30 Jan 2026 12:27:25 +0000

Hi! thanks for your feedback. Indeed the site fails to tell you what ezS3 does: it's not an alternative to Minio, it's not an S3 storage implementation. S3 is made for machines, ezS3.net "proxies" it for humans: it's a web-based S3 browser, and adds RBAC and sharing.

Ezs3.net to share S3 access in your team

weddpros — Fri, 30 Jan 2026 09:36:11 +0000

Article URL: https://ezs3.net/

Comments URL: https://news.ycombinator.com/item?id=46822366

Points: 3

# Comments: 3

New comment by weddpros in "SEC obtains final consent judgments against former FTX and Alameda executives"

weddpros — Sat, 24 Jan 2026 04:57:43 +0000

Trump could do it... to piss off SBF himself (second biggest donor to Biden/democrats behind Soros)

New comment by weddpros in "The Good Hallucinations"

weddpros — Wed, 21 Jan 2026 12:04:00 +0000

https://github.com/sslboard/SSLBoard-desktop for an OSS project I’m working on with those principles

The Good Hallucinations

weddpros — Tue, 20 Jan 2026 03:33:33 +0000

Article URL: https://chris-hartwig.com/blog/you-want-hallucinated-code/

Comments URL: https://news.ycombinator.com/item?id=46687628

Points: 2

# Comments: 2

New comment by weddpros in "2026 Predictions Scorecard"

weddpros — Thu, 08 Jan 2026 01:58:27 +0000

And the record is N=35=7x5, that's 6 bits not 35 bits as the author is saying... Maybe he'd revise his prediction on QC if he knew?

New comment by weddpros in "The Dangers of SSL Certificates"

weddpros — Tue, 30 Dec 2025 14:23:17 +0000

I'm working on something that could help: linking sslboard with software that's making issuance and distribution of certs easier, ie. a proper CLM. It's not cloud based for security reasons. In that context, we know your wildcard certs because we issue them, and we could know where they are if we distribute them... Please get in touch with me (chris@sslboard.com) if you're interested in early access and having a word in the development of the product!

New comment by weddpros in "The Dangers of SSL Certificates"

weddpros — Tue, 30 Dec 2025 01:32:17 +0000

one-address-to-N-servers is perfect if the N servers don't all terminate TLS. If not, it becomes impossible to actually test what certificates are actually served. I've seen this fail before (TLS tests flip/flop between good/bad between checks).

As for wildcard certs, I agree there are use cases where we really need them like dynamic subdomains {customer}.status.com

Can you share how they make ACME client configuration easier?

New comment by weddpros in "The Dangers of SSL Certificates"

weddpros — Mon, 29 Dec 2025 12:40:16 +0000

If you're using a cert on multiple IPs, or IPv4+v6, SSLBoard will monitor all IPs. It's not foolproof, but it covers most common practices. btw wildcard certs don't have a good reputation (blast radius)...

New comment by weddpros in "The Dangers of SSL Certificates"

weddpros — Mon, 29 Dec 2025 12:30:31 +0000

Indeed, SSLBoard is scanning CT logs. You can add/import host names though, to allow monitoring of wildcard certs. Same if you're using ports that are not 443, you have to add these to the list of hostnames that are checked.

It's not as convenient, but it's the best SSLBoard can do...

New comment by weddpros in "The Dangers of SSL Certificates"

weddpros — Sun, 28 Dec 2025 09:29:07 +0000

The scalable way (up to thousands of certificates) is https://sslboard.com. Give it one apex domain, it will find all your in-use certificates, then set alerts (email or webhook). Fully external monitoring and inventory.

New comment by weddpros in "If AI replaces workers, should it also pay taxes?"

weddpros — Mon, 15 Dec 2025 15:23:54 +0000

Unsurprisingly it’s a European article. Europe will tax AI to death like it does with everything it can’t find a way to compete in. And it can’t compete in much…

New comment by weddpros in "The Typeframe PX-88 Portable Computing System"

weddpros — Mon, 15 Dec 2025 01:57:26 +0000

I dearly remember seeing a PX-8 in the hands of a person (was it by a pool?) and thinking "it would be so nice if work could look like that". It must have been Byte magazine?

I was a kid in France, now I'm working remotely from Bangkok: dreams come true after all.

New comment by weddpros in "Ask HN: What Are You Working On? (December 2025)"

weddpros — Mon, 15 Dec 2025 01:04:01 +0000

Making a phishing domain detection tool through Certificate Transparency real time scanning.

https://catchPhi.sh/

I intend to make it "too cheap to pass", because we should all be able to monitor Certificate Transparency.

Email me if you want to be a design partner!

Scan PQC TLS for a whole domain, Free

weddpros — Tue, 18 Nov 2025 08:14:30 +0000

Article URL: https://QCready.com

Comments URL: https://news.ycombinator.com/item?id=45962619

Points: 1

# Comments: 0

New comment by weddpros in "SSL Configuration Generator"

weddpros — Sat, 15 Nov 2025 15:57:55 +0000

That's good! I'll use TLS when OpenSSL gets renamed :-D (I own many SSL domains and projects)