Yes, and the RRSIG record will prove that it hasn’t been tampered with.

As soon as everyone signs their zones with DNNSEC, we can implement DANE to use self-signed certificates safely, and all our problems will go away, world peace will be achieved, and food will taste better.

If you have CGNAT, you’ll need to use IPv6 to get connections from the internet at large. The downside is that IPv4-only instances won’t be able to communicate with you.

Simple. Your users don’t care if it’s insecure. They click on fake password reset emails. You’re the bad guy here. They still haven’t forgiven you for requiring them to enter numbers when they want to log in.

It’ll be a long time coming. I’ll be in a nursing home by the time ReactOS can even replace Windows 98, much less XP.

But I’ll be goddamned thrilled when you do, because that’ll be 95% of the Win32 API.

Oh good, I love Markdown.

Wow. That’s awful. You’d think it would just let traffic pass stupidly.

That being said, I’m from the UniFi camp, so I’m used to adopting hardware. Still, if you’re not expecting it, especially in a DR scenario… ugh.

That’s what I don’t like about Lemmy. However, that’s what happens when you have federation. If one /c/Apple doesn’t fit your needs, join another /c/Apple. If one /c/Apple gets taken over by a crazed moderator, use the other one. You decide which one you want to post in, but you can follow them all and comment on as many or as few as you want. It’s slightly annoying, but that’s just how it works.