est.social on üks paljudest sõltumatutest Mastodoni serveritest, mida saab fediversumis osalemiseks kasutada.
est.social on mõeldud Eestis üldkasutatavaks Mastodoni serveriks. est.social is meant to be a general use Mastodon server for Estonia.

Administraator:

Serveri statistika:

90
aktiivsed kasutajad

#http

7 postitusega4 osalejaga0 postitust täna

Should you ever run across an article that says you don't need a VPN because most every website use HTTPS, be aware that you can not see the encryption, or the lack of it, in mobile apps. Thus, things like this happen - Apple did not bother to upgrade their own software from HTTP to HTTPS.

9to5mac.com/2025/03/18/apples-
Apple’s Passwords app was vulnerable to phishing attacks for nearly three months after launch
#vpn #http #https #encryption

9to5Mac · Apple's Passwords app was vulnerable to phishing attacks for nearly three months after launch - 9to5MacIn iOS 18, Apple spun off its Keychain password management tool—previously only tucked away in Settings—into a standalone app called...

So, apparently, it is no longer possible to require #HTTPS client certificate authentication for a specific subtree when using #TLS 1.3, because renegotiation is no longer supported and there is no replacement protocol for “hey client, if you want to go in there, I'm gonna need to see your certificate first.”

Lovely. I was using that. 🤦‍♂️

Vastatud lõimes

@compl4xx @Layer8 @nick @kuketzblog @marcel @mspro

  • EXAKT DAS!

Meine Rede...

Oder um es einfach zu erklären: Warum gibt es #HTTP(S) & #HTML sowie #eMail ( #IMAP & #SMTP) bis heute und keiner nutzt mehr #AOL, #MSN, #ICQ?

Wenn @signalapp / #Signal wegen #CloudAct geflipped wird wie #EncroChat, #ANØM & #SkyECC dann stehen Leute alternativlos in der shice ubd die ganzen "Sicherheitsversprechen" lösen sich in "#TrustMeBro!" und #Lügen auf.

Ich nutze meinen XMPP-Account seit Ewigkeiten und habe drölfzig Clients durch. Aber Kontakte erreichen mich darüber Problemlos!

Infosec.SpaceKevin Karhan :verified: (@kkarhan@infosec.space)@kuketzblog@social.tchncs.de naja, @signalapp@mastodon.world fällt auch unter #CloudAct ubd #Threema ist noch #proprietärer als #Signal. - Gibt mit #XMPP+#OMEMO eine wirklich #sichere & #dezentrale Alternative die keine #PII wie #Telefonnummern oder #Google-Dienste braucht! Ach ja, @monocles@monocles.social / #moniclesChat haben [grade](https://monocles.social/@monocles/113925173206088469) ne #Promo zum #GlobalSwitchDay und bieten deren #App kostenlos an. - Und sonst gibt's auch noch @delta@chaos.social / #deltaChat welche #PGO/MIME & #eMail als Basis nutzen! Für [beide gibt's](https://github.com/greyhat-academy/lists.d/blob/main/xmpp.servers.list.tsv) [kostenlose Anbieter](https://github.com/greyhat-academy/lists.d/blob/main/email.servers.list.tsv) und #SelfHosting ist genauso machbar wie deren *echte #E2EE* mit #SelfCustody!

New @small-web/kitten release (version 5.2.0)

Adds missing types on `KittenRequest` and `KittenResponse` interfaces (the missing request and response helpers).

• `is()`: check for request type. e.g., `request.is('html')` or `request.is('json')` (you can also use the full mimetype).
• `json()`: JSON.stringify passed data and end response with inline JSON.
• `jsonFile()`: JSON.stringify passed data and end response with JSON attachment and optional file name.
• `file()`: end response with passed file data and optional file name and mime type.
• `withCode()`: end response with passed status code and optional body.

Kitten request and response helpers documentation:

kitten.small-web.org/reference

Kitten type safety tutorial:

kitten.small-web.org/tutorials

Enjoy!

:kitten:💕

Vastatud lõimes

⬆️ @jwildeboer

>> #Web could only grow because… two complimentary standards — #HTML for the documents and #HTTP for the transport… In social networking we now see one truly open approach… and a bunch of proprietary protocols…

👍

HTML went through a Cambrian explosion with incompatible extensions in proprietary browsers until Netscape and MS IE remained in a fragmented web.

#ActivityPub, as good as it is, has some fatal flaws. The protocol either evolves to fix those, or someone else will.

Vastatud lõimes

@bagder Problem with that is (besides occasional bugfixes), most people including myself would see #curl to be functionally complete and anything "nice to have" would be considered not worth the balooning in #complexity and #size.

  • I mean, does curl need to be able to do #BitTorrent (magnet:), #IPFS (ipfs://) or god forbid #blockchain (i.e. #EVM) support?

  • Do you really want to integrate @torproject / #Tor support natively into curl when using #HTTP (localhost:8118) and #SOCKS5 (localhost:9050) #proxy allows for the same and doesn't necessitate having to handle and ingest Tor arguments as well??

In fact if #toybox didn't have a #wget implementation that I could use for OS/1337 I would've merely chosen tiny-curl -o as a global alias or if #tinycurl wasn't an option, curl -o instead.

  • Maybe someone who wants to have said functionality like tor support built-in will go and IDK make i.e. #neocurl or sth. along those lines or build something like #ethcurl or #torcurlor #ipfscurl or whatever...

That being said I am glad curl isn't solely maintained by you but has other contributors (give them a shoutout!) but I also am glad you maintain that vital software that most "#TechIlliterate #Normies" most likely never heard of but propably use on a daily basis as part of all the #tech they use to #consume media with...

  • I consider curl to be "the #vim of downloaders" (tho that's kinda insulting and limiting since curl is more than just a downloader and more intuitive than vim) with wget being "the #vi of downloaders" (tho wget is even simpler to use than vi)...

Either way, curl is awesome...

curl.securl

🆕 blog! “Mastodon Now Sends Referer Headers! Hurrah!”

Back in 2022, I wrote this rather grumpy post on Mastodon, the federated social media platform.

> Mastodon enforces a "noreferrer" on all external links. I have mixed feelings about that. As a blogger, I want to see *where* visitors are coming from…

👀 Read more: shkspr.mobi/blog/2024/12/masto

#fediverse #http #mastodon

Terence Eden’s Blog · Mastodon Now Sends Referer Headers! Hurrah!
Veel kasutajalt Terence Eden

#Hurl, maybe my favourite #Postman replacement, just released a new major version. Nothing too big from my POV, but the --curl "native export" looks useful. So you can communicate your requests to folks who use curl, or use it as input to other tools’ importers, which usually "speak" curl.

(Before you had to fish the #curl equivalent out of the verbose output. PS: I with --very-verbose was just -vv or -vv; to whom it may concern :)

github.com/Orange-OpenSource/h

GitHubRelease 6.0.0 · Orange-OpenSource/hurl6.0.0 (2024-12-03) Thanks to @cemoktra, @zikani03, @lambrospetrou, @jmvargas, @quantonganh, @sandeshbhusal, @thePanz, @niklasweimann, @infogulch, @orlandow, @bp7968h, Breaking Changes: Check that ...