I see one reason why: I was running my whole thing on Cloudflare whereas I do need one MCP proxy all the time and if I run that one thing on GCP it suffers from latency so moving all my stack there now. The extra cost is for control of docker/kubernets which gives me on prem as well. So I kinda answered my own question of how to deploy both on CF as well as move away from it
This author actually sells his time for $275 per hour for career advice and I can tell you thats the absolute waste of both your time and money. I did the mistake and he is cargo culting PM stuff. Anyways not surprised at his take on AI
Andrew misunderstands the purpose of including CloudFlare in the cert. He thinks its to easily identify the CA. The ICA is not used that way. In this case, Cloudflare is the one managing all of the certificates issued off this change. If you have an issue with the certs, you know Cloudflare is the one managing it.
He says “its completely useless for human consumption”, but that’s just more of the same misunderstanding. Afterall, would you rather know that all the sites are being operated by Cloudflare or know that DigiCert issued the cert? The average person doesn’t care who issued the cert – they care about who is managing the certs.
The name of the root is to indicate ubiquity, not to provide identification of the CA who is operating it. If you need to know whether a cert will work on an older platform, you look at the name of the cert embedded, not the serial number. Its faster and easier to do so. You also want to know when things will expire and when you might need to migrate CAs. That’s best done with the name of the root. Plus – this is how browsers track which roots are trusted. Browsers could tie to the serial number, but they use the subject info of the cert for identification purposes on what roots are included and what roots are audited.
In summary, he has misguided notion about why these values are in the certs and the value they provide. He sees no value in them because he assumes people will be looking at the ICA and root purely to contact the CA, when that is rarely the case. I dont think there is a security or real issue with the information.
“Life is nothing but an electron looking for a place to rest.” Although life is more complex than a single electron, Szent-Györgyi's quote emphasizes the importance of energy and metabolism in all living systems and he got a Nobel for isolating Vitamin C among other cool experiments. In this memoir he summarizes his research career and also the times from the viewpoint of a Hungarian Jew (WW2 era)
"Autobiography of a Yogi" by Paramahamsa Yogananda as its a book thats on one level about a chockful of miracles in India and weird bugs about reality (like what you see if not what you get) but on a deeper level about reality in the way that steve jobs felt compelled to hand it as his parting gift at his funeral
The issue though is that for the same identical cache content wouldnt you prefer it to be on your local laptop than a cloud somewhere purely for the expediency aspect much less the offline experiences that it may provide?
>To get the stats you want, you'd probably need to write a plugin using one of the hooks that lets you see all the requests (which are being phased out, but such is life).
Hmmm. So there lies the rub that we dont know as of now (will try to write an extension as you said)
>If you run an app like gmail for example, you can store most everything in cache, >and local storage (browser), including logos, button graphics etc. Resulting to >an app that loads almost instantly most of the time as it's coming from disk >(relatively speaking, many would argue that disk access is extremely slow).
Does this extend to other thick client apps like SAP or even ftp just for thinking's sake?
>This information stored should obviously not be time sensitive. But if you're >running a client for social networks or such, it's perfectly a good idea to cache >the last 10 posts seen for example, so that when the user loads the page, he >instantly has something to look at while the browser is fetching the fresh >content.
Correct but now this is why I say an API because each app can have its own way of caching the last few items (http objects, files, posts whatever might be tagged)
>One key consideration is security: do not cache things on the browser that may be >private or sensitive information, unless encrypted, but even then the argument >could be made to not do it at all. That said, storing your application graphics >and most of the UI bits in local storage can certainly improve the user >experience greatly.
Is it because of the browser? Say I remove it out of the browser and place it somewhere else, encrypt it store it and wont display until I verify the end user with SSO etc, would that take away this concerns. Depends on the user(most UI bits I agree need be cached and harmless either way) for what bits might be cacheable
May I ask whats the equivalent for it in Chrome as majority of users are on Chrome for me.
>> as my enterprise I want to push objects to my employee's cache using an API
Well, theoretically you can do it using Service Workers today (https://developers.google.com/web/ilt/pwa/caching-files-with...) but I want to do it in a automated way so that I minimize the thundering herd when everyone comes tomorrow on Monday morning apart from enabling an offline experience (users in some countries have crappy connections so asynchronously pushing it is a way to solve it)
>Combine it with some basic packet capturing of new TLS connections and I could push arbitrary JS that did event capturing on all the sites that employees visited.
Hmm..I need more on this but the idea is they are SRI checked and come from a supply source thats trusted (but I get your drift on solar winds kind of lateral attack), but if I am right then what you say can even be done with the service worker API I mentioned above
>Look at request inspectors, log files, etc. Network behavior is easy to observe.
Correct but do you know of any way to look at the cache hit ratio, stuff that didnt fit into the browser cache and other stats? I understand you can do it on a page level but I want to accumulate all of sessions and look at it aggregate and yet to find a easy way to see under the hood
>Make sure as much of your corporate intranet stuff as is reasonable counts as >same domain for purposes of cache sharing, and standardize on a single version of >your frontend libraries, etc, and you might actually get cache hits naturally. >Standardizing frontend libraries is hard, but if shaving the couple of ms here >and there is important, I'm sure you can find a way.
Correct but there is no guarantee its in the cache whereas my effort is to publish my app's shell/versions of frameowrks before I enroll users to my app
>Now, maybe you've got a lot of work from home with terrible networks; that's >pretty common today, or maybe you're work from the field and have had terrible >networks forever. In that case, it might make sense to do something like wrap >your web pages in electron where all the html/css/js is included and you only >need to fetch data and you've got full control over the caching. Nobody on HN >likes electron, but it would solve your enterprise problem. You might consider >actually making an application, but that's unfashionable these days.
Now, this is new, I need go learn this electron thing
Correct but how do I know what my browser cache is doing . To be clear my context is coming from this article here: https://infrequently.org/2022/03/cache-and-prizes/ which clearly makes sense as a browser vendor but as my enterprise I want to push objects to my employee's cache using an API
The same technique was extrapolated to images in this paper where a CDN's corpus of cached images were classified and apply the optimizations for each image as the exemplar for it bucket.