kornrunner

# Contributor: Yauheni Kirylau <yawghen-gmail-dot-com>

_pkgname=libui
pkgname=${_pkgname}-git
pkgver=r2679.ec15e25
pkgrel=1
pkgdesc='A portable GUI library for C'
arch=('i686' 'x86_64')
url='https://github.com/andlabs/libui'
license=('MIT')

kornrunner

OverEncrypt

This is a guide that I wrote to improve the default security of my website https://fortran.io , which has a certificate from LetsEncrypt. I'm choosing to improve HTTPS security and transparency without consideration for legacy browser support.

WARNING: if you mess up settings, lose your certificates, or decide to no longer maintain HTTPS certs, these steps can and will make your domain inaccessible.

I would recommend these steps only if you have a specific need for information security, privacy, and trust with your users, and/or maintain a separate secure.example.com domain which won't mess up your main site. If you've been thinking about hosting a site on Tor, then this might be a good option, too.

The best resources that I've found for explaining these steps are https://https.cio.gov , https://certificate-transparency.org , and https://twitter.com/konklone

kornrunner

### Keybase proof

I hereby claim:

  * I am kornrunner on github.
  * I am kornrunner (https://keybase.io/kornrunner) on keybase.
  * I have a public key whose fingerprint is 3A7D 3F18 1F6F F906 A7DB  D289 0FF4 B099 C75B 879E

To claim this, I am signing this object:

kornrunner

/hex
scd serialno
scd apdu 00 20 00 81 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 81 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 81 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 81 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 83 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 83 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 83 08 40 40 40 40 40 40 40 40
scd apdu 00 20 00 83 08 40 40 40 40 40 40 40 40

kornrunner

#!/bin/sh

apk add bind
cp /etc/bind/named.conf.recursive /etc/bind/named.conf
named
echo "nameserver 127.0.0.1" > /etc/resolv.conf