ancarda

The only thing that comes to mind is having most websites be sites and not apps. Most sites don't need custom fonts, JavaScript, and CSS.

If Firefox & Chrome had support for something lightweight like Gemini (https://gemini.circumlunar.space/) then most sites could just use that.

With that sort of setup, restrictions on the web like uMatrix would be a lot less painful because most sites wouldn't ever need to be whitelisted.

So far that hasn't really come up. How often do you need to check your calendar outside? Maybe I don't need to very much because I work from home.

Here's some possible scenarios though:

* If I need to remember when something is going to happen, such as "I'm leaving my house to meet a friend at 4 PM", I can just commit to memory what time it was suppose to be.

* If there's a lot of stuff happening, then I'd make a note on my phone. If the times of events change while I'm out, it doesn't really matter if my calendar at home is out of sync. I'm just going to cross the day off when I get back.

* If I find out a later date will change ("the user group has been moved to Thursdays"), then I'll leave myself a reminder on my phone. Most of the things on my calendar are actually little post-it notes, so I can move things around. I only write things in ink when they will never change, like national holidays that are already scheduled/set in stone.

So far, I haven't really run into any pain points. The drawbacks of paper calendars just aren't enough to overcome the drawbacks of electronic calendars.

>I might just go back to pen and paper at this point.

Maybe you kid, but... I've been using a physical calendar on the wall this year. I also replaced my Apple Watch with a Casio F-91W some time ago.

You know what's really great? My calendar or watch never gets hacked and it's never unavailable because some overnight software update broke it! Sure, the F-91W technically runs software, but it has no connectivity. That's the important part.

Now if I could just figure out what to do with my phone... I don't think dumb phones are particularly secure, so maybe it makes sense to keep using Android? Or eventually switch to Linux on my phone?

Sure. I use the colors peachpuff+red and green+lightgreen when I need to show a success or error/warning box. Like so:

    .notice {
        padding: 1em;
        border: 1px solid black;
        margin-bottom: 1em;
    }
    .notice.warning {
        background-color: peachpuff;
        border-color: red;
    }
    .notice.success {
        background-color: green;
        border-color: lightgreen;
    }

I think the end-result is pretty nice.

How reliable are they going to be? I have heard RAM isn't as reliable as it used to be due to the ridiculous densities we've gotten them to. Same for HDDs.

At what point do we stop because reliability has gotten unacceptably low?

I don't understand the root cause... Did nobody at Fiserv know about example.com or the .invalid TLD?

I see this sort of thing ALL the time - documentation referring to completely made up domains like "newcustomer.com", and it soon makes its way into software becoming real world DNS lookups for these placeholder domains. Nobody ever goes back and changes them and there's no monitoring or awareness that it's an issue.

Please take a moment to read BCP 32 - https://tools.ietf.org/html/bcp32 if you do not know about example.com or the .invalid TLD.

Nothing, so long as you're okay with telemetry, bundled junk like pocket, and the removal of the compact UI (see the thread from yesterday - https://news.ycombinator.com/item?id=26464533).

Firefox's internals are great -- it's never been faster or as stable, and for that we made real sacrifices like losing XUL extensions but increasingly I don't understand Mozilla's decision making.

EDIT: I understand many of the things I'm talking about can be fixed with about:config. I had a list of over 30 flags in my notes and it was becoming untenable to patch all my devices whenever a feature I needed was changed or removed. Whereas with Waterfox, I so far have only one about:config change:

    dom.security.https_only_mode = true

Why not use a Firefox fork like Waterfox? That fixes a number of the complaints people have with Firefox while not pushing us towards a browser engine monopoly - which you do by using a Chromium based browser.

Besides, the Basic Attention Token crap in Brave is kinda shady.

>The Engineering team is well aware of the community feedback.

Does that mean Mozilla is aware how unpopular this is, but are going to go ahead nevertheless?

Is there even a single person who wants this feature to be removed?

For fuck sake really? Is it making Firefox hard to maintain or something?

I have a small screen (1280 x 800) - I need things like compact density to make the screen more usable.

I cleared F-Droid's cache and data. After an hour, I still can't download it :(

Is anyone else getting this error on F-Droid?

    Download failed!
    The requested file was not found.
    https://f-droid.org/repo/eu.faircode.email_1518.apk

How can I download this app? I use K-9 Mail at the moment, but I'd like to try this to see if it's any better.

Well nowadays you can get a certificate entirely for free from Let's Encrypt, but as for why, the site https://doesmysiteneedhttps.com/ covers it better than I can

Is this your website? http://www.dotnom.com/ I like it, very fast and clean!

Would you consider setting up TLS?

I love the idea! Since my website is just a single page, I didn't submit it but did add the link in my footer.

Watching that progress bar was physically painful. I'd rather not use software that lies to me.

Why use a spinner for downloading? Don't you know how many bytes you need to fetch and how many you have received so far?

wget has a progress bar, and it works perfectly fine.

EDIT: Though, if the server does not have a Content-Length header, you will get an indeterminate progress bar (a kind of spinner, I suppose) in web browsers, if that's the kind of thing you mean?

This is one reason why I prefer command line programs and websites like SourceHut and HackerNews over GitHub and Reddit. Also, why I disable or reduce as many animations as I can in graphical software I use.

Everything is just too slow -- and it doesn't need to be.

>they neither support backing up the database nor syncing/importing old messages from the phone

Why Signal doesn't support this is beyond me. I can basically only use it for scenarios where I don't want any chat history, which just isn't that common.

SourceHut, maybe? https://sourcehut.org/

If you like Mutt, you might really love Aerc -- https://aerc-mail.org/

It's a shame that "always" will whitelist a whole site though. It'd be nice if Lynx whitelisted a cookie name (per site). That way I could permit "PHPSESSID", but not "_ga".

I never found a Firefox plugin that let me whitelist specific cookies. I might try to write one when I have time.

Has this happened as HTTPS adoption has increased? Do you believe BGP RPKI will be different?

A lot of threads about rising use of encryption seem to have this fear - that it will be used against us at some point, and I'd really like to understand where this fear comes from

Even taking a recent example of Parler; as far as I know it had HTTPS support and the corresponding X.509 cert was never revoked - instead hosting and I think the domain was terminated

>We are happy to have over 99% of our IPv4 and IPv6 -Space covered under a Route Origination Authorization, and that we are right now dropping RPKI invalid routes in every single Point-of-Presence for AS16509.

Does anyone know if AWS is going to push the remaining 1% to implement ROA?

Also, it sounds like an unsigned route - which I think most BGP announcements are - is still accepted, right? Any idea when we can start to require routes be signed?

Offer them a job.

How would cookies help mitigate against DDoS attacks?

Huh, I get an RFC 1918 address (10.122.129.53) when I look in the settings.

No IPv6 support though :(

Years ago I used to have an IPv6 tunnel provided by SixXS. That let me get my feet wet by moving to v6 capable hosting and being able to send traffic to my website over the SixXS tunnel.

At this point, though, you may be able to find an IPv6 capable ISP and just switch to them. Your phone might also have IPv6 too, especially if it's 4G/LTE.

Any amount of exposure is better than none. If you're using AWS, I can help you setup IPv6 in your VPC and use it with EC2 which can let you get some first hand experience. My email is in my profile if you want to take me up on that offer.

By that logic, basically nothing supports IPv6.

There's nothing that prevents email from working over IPv6. The sender and receiver just need to have IPv6 connectivity.

Every email provider that supports IPv6 will also support IPv4 (for the time being). To use Gmail as an example:

    aspmx.l.google.com. 293 IN AAAA 2a00:1450:400c:c0b::1a
    aspmx.l.google.com. 293 IN A 173.194.76.27

There is both an A and AAAA record. You can send emails over IPv6 or IPv4 to Gmail addresses.

Did you mean you can't exclusively use IPv6? Because that is also true for browsing the web - because so few websites support IPv6, a lot of links will just not work.

We're still transitioning to IPv6, so yes - for now - one needs an IPv4 address to reach the whole Internet.

That doesn't make "You can't run an email server on ipv6" correct.