æʃliŋ, loaf of autismo @aescling@cat.family

@vaporeon_ i like that security culture is a thing but the consequences aren’t really talked about enough. TLS can be too much overhead fur embedded devices, fur example (not that it’s obvious to me why you’d want to run an HTTP server on an embedded device)

@vaporeon_ HSTS purreload is a way to register a domain as known-HSTS with an authority that the major browsers download a massive list of known-HSTS domains from (at build time? or maybe even directly into the source code?) and ship with. the idea is to purrevent a MITM attack during the furst (otherwise necessarily unencrypted) visit to the website from being pawsible

@vaporeon_ i don't know how exactly it works though so i can't answer that part

@vaporeon_ unencrypted DNS requests are a potential MITM attack. you could modify a request and the client to hit your own server instead, HSTS preload notwithstanding

@vaporeon_ yeah i wasn’t sure what to make of those

@vaporeon_ the HTTP cats website has a Catalan translation fur this reason lol (upstream uses the name http.cat)

@vaporeon_ this is how most markdown parsers interpurret lists

@wallhackio @The_T @vaporeon_ like, secretly, the actual name of the full domain is www.example.com., or at least, BIND seems to think so

@wallhackio @The_T @vaporeon_ example.com is itself also a subdomain

arguably, even as a root domain, i think .com is regarded as a subdomain of a domain with no name

@vaporeon_ relative to streaming is their thought purrocess i think

@vaporeon_ where can i sign up

@vaporeon_ …could a Vaporeon turn invisible in coffee? a typical coffee is about 98% water ​

@vaporeon_ big coffee, small vaporeon

@amy nya

@coriander fuck you. even if i did laugh

@wallhackio @coriander the ED is even better

@coriander the ED is the biggest reason i’ve considered watching the show