quicksilver03

letzten Monatdiscuss

I'm interested to know the rationale behind the choice of AXFR to replicate zones, as opposed to database replication. Has this been always reliable enough for you?

Also, is the AXFR latency an issue or it stays always within your acceptable parameters?

quicksilver03

vor 2 Monatendiscuss

This looks interesting, I run PTRDNS https://www.ptrdns.net/ and some of the features I offer overlap with DynIP's.

I decided to use MariaDB as backend and replicate the data with Galera, I also built a proxy that sits in front of PowerDNS and allows per-account API keys (and hopefully someday per-zone API keys).

I'm curious to understand the rationale behind your architecture choices.

quicksilver03

vor 5 Monatendiscuss

PowerDNS has an API which is working pretty well, I've been using it to generate ACME certificates since a few years and I also built a DNS hosting service around it.

quicksilver03

vor 6 Monatendiscuss

I've been able to submit new entries to

https://eucloud.tech/

https://buy-european.net/

I've also found other problematic ones:

https://euro-stack.com/ (I couldn't understand how to submit a new entry)

https://www.goeuropean.org/ (all submissions fail with an AirTable error [sic] that the workspace is at the record limit)

quicksilver03

vor 6 Monatendiscuss

I've seen the same thing, the site accepts submissions but there's no one to either approve or reject them.

Unfortunately they did really well at SEO at one time, and more active alternatives appear far below in the search results.

quicksilver03

vor 8 Monatendiscuss

I have an issue with

    The geneal idea of HTMX is that your HTML will be rendered by the backend — à la Server Side Rendering.

To me this phrase makes no sense, what's the thought process behind this meaning of "render"? The only place HTML is "rendered" is in a browser (or in a user agent, if you prefer).

quicksilver03

vor 9 Monatendiscuss

Having seen some of those cases, I'd say it's rather because Bob in Finance doesn't want to be bothered with MFA and has raised so much stink with the CFO that IT has been ordered to disable MFA for him.

quicksilver03

vor 9 Monatendiscuss

Can you share what's your solution for filtering incoming spam? I've had to abandon Stalwart because its spam filter is so ineffective and inconsistent.

quicksilver03

vor 9 Monatendiscuss

That looks more like SOC2 than ISO-27001 though.

quicksilver03

vor 3 Jahrendiscuss

Close, the giant tech companies may or may not comply but they surely can afford the fines that the various EU Data Protection authorities dream into reality by twisting an ever-changing body of interpretation of ambiguously written rules.

quicksilver03

vor 5 Jahrendiscuss

> First: the rule with these kinds of certifications is simple: don't do them until you have customer deals contingent on them.

Getting an ISO 27001 certification can take months of effort, and not all deals can be stretched this far without significant repercussions.

Just a data point, I lead the certification project at my current company and it took us 8 months (~65 people in total, of which 3 full-time in IT): the auditors were a little hesitant at first because the system wasn't "battle-tested" as much as they'd liked.

comments