XMPP Service Operators - 2021-06-09

Anhydrous: still cant believe you like mastodon

The software or activity pub based social media in general?

qy, do you not like mastodon

Fediverse generally. I love the protocol, i just dont like mastodon the software, nor it's devs, nor almost anyone who uses the network

I use pleroma, not much but it took the place of Twitter

I don't know how else to find similar people

Much better to see open source projects using mastodon for their updates than twitter etc. Even comes with an RSS feed for free.

Definitely

I do prefer it to twitter

I just still dont enjoy it, per se

I've been running an instance for about 4 years now, so I guess I'm into it.

Ya I definately don't enjoy it, I don't really know what to use it for

I think I'm just not huge into social media generally. But peer or interest groups I like

Dont worry, pretty sure that makes you one of the sane ones

qy: who said I like mastodon?

> Anhydrous wrote: > 4223: !!! Very nice

Very nice regarding push notifications, and a open presence on the fediverse

O

Anhydrous: 👍

4223: right back at ya

FWIW, there are "Groups" on GNU social and various nodes with their own ecosystems in the fediverse for different topics i.e, mathstodon.xyz or witches.live for mathematics and paganism respectively.

rob https://mastodon.online/@FediFollows is building a directory of interesting entities on the fediverse

(they post a one per day, and also have a directory by topic

get ready for all letsencrypt certs to be revoked https://community.letsencrypt.org/t/2021-06-08-certificate-lifetime-incident-valid-for-an-extra-one-second/153426 (probably/hopefully not though)

moparisthebest: we should move to Symantec, amirite?

no they have a bug allowing 389 days and 1 second according to that ticket

so likely all TLS certs will be revoked, if they decide to apply the rule strictly :)

That would be a stupid thing. Yes effing clear up the RFC and whatnot, but why bother revoking? What's the _threat model_ now?

the revoking talk is because CAB requirements say if you mis-issue a cert, you must revoke it

they claimed 90 days, delivered 90 days + 1 second, therefore must revoke

I reckon everyone would consider it stupid though

I understood, it's not human logic though Why do you keep the rules? Is the spirit of the rule applied if you revoke 158000000 certs today for 1 second? ✏

Does LE have servers big enough to issue 158000000 certs an hour after the revocation?

Really hope one of the board members or whatever don't turn it into a powerplay

https://letsencrypt.org/2021/02/10/200m-certs-24hrs.html

I said 1h :)

This one second is so stupid. Crazy that people have emergency meetings for that.. I would call.it close enough for the compliance and don't even bother. There is no thread model. I really don't get it

Agreed. Certificate expiry is weird anyway - I'm pretty sure 99% of applications don't close an open connection once the certificate expires

Also, given certbots reputation of failing to update, every extra second counts :)),