billwashere

You make some good arguments so I’m not attacking you at all, just my thoughts on your points. These short renewal times are getting to the point of ridiculousness and creating another point of failure with little time to do anything about it. I find these super short certs less than useful, create many more possible problems, and not really necessary except for a small set of circumstances. And I have been in IT as a web dev/sys admin/systems architect for over 30 years now.

• If a private key leaks you’ve likely done something wrong. Practice better key management and don’t be stupid
• Updating certs to keep up with new crypto standards is useless. For one they don’t change that often and if there is a pressing reason you can’t update earlier.
• Yes the processes have to be automated which is not a bad idea at all. But you are completely relying on the service to not be down and that something on your end hasn’t also broken. Anybody that hasn’t ever been a sys admin has had several automated process die for no apparent reason.
• This could actually be an issue but totally out of your control. This is only relevant if you domain hop frequently and if your that worried about security, you aren’t doing that.

One step closer to single use certificates. Great…

I’m assuming this is daisy chained. In a power strip there are not cables between the plugs that can be unplugged. Nor are there switches on each individual plug that can be accidentally flipped off. Any extra component is a failure mode. If it gets unplugged it loses power just the same as any failure. Now don’t get me wrong, I think this design is clean, expandable, and offers some neat features over a plain power strip, but to suggest there aren’t extra risks associated with this design is a bit short sighted.

What’s below not enough?

I imagine most people that do this are already IT professionals. Or if they can does this they should be IT professionals. The difference between what I get paid to do and self-hosting is generally the scope and cost of the hardware. That’s about it.

Why Apple hasn’t mad the iPad mini a CarPlay screen is beyond me. You can do it with an android tablet but not an iPad.

Sustainable sustainable sustainable sustainable sustainable sustainable sustainable. Sustainable sustainable sustainable sustainable sustainable sustainable.

Ok I’m arguing for containers/VMs and granted I do this for a living… I’m a systems architect so I build VMs and containers pretty much all the time time at work… but having just one sorta beefy box at home that I can run lots of different things is the way to go. Plus I like to tinker with things so when I screw something up, I can get back to a known state so much easier.

Just having all this things sandboxed makes it SO much easier.

I really thought the same thing. But it truly is super easy. At least just the containers like docker. Not kubernetes, that shit is hard to wrap your head around.

Plus if you screw up one service and mess everything up, you don’t have to rebuild your whole machine.

It’s just a matter of time before those are enshittified as well.