louipc
louipc.bsky.social
👤 Joined on 17 May 2023
40
Followers
35
Following
8
Total Posts
📜 Kullanıcı Geçmişi
- 17 May 2023, 15:03
🎉 Bluesky'e katıldı - İlk kullanıcı adı:
@louipc.bsky.social - 12 Kas 2023, 23:26
🔄 Profil bilgileri güncellendi
🚫 Blokladığı Kullanıcılar
❤️ Beğendiği Gönderiler
If you're curious about the configurations we use on our servers, most of that is available in these 2 repositories: github.com/GrapheneOS/n... github.com/GrapheneOS/i... Our bird.conf for announcing our anycast IPs via BGP to Rage4 and the routing setup script aren't published yet.
Show PostSeveral large public resolvers including Google Public DNS and several European ISPs have adopted opportunistic ADoT (Authoritative DNS-over-TLS) and use it with our servers. There's no way to ENFORCE using ADoT yet but we're keeping an eye on it. We have valid WebPKI certs + DANE TLSA for it.
Show PostWe're in the process deploying a major upgrade to the GrapheneOS server infrastructure to provide faster connections to our services and higher robustness. If you notice any new issues connecting to our services, please report them in our Infrastructure chat room (grapheneos.org/contact#comm...).
Show PostWe can drop this workaround for SUPL once we decide to drop service support for older generation Qualcomm Pixels. Qualcomm did eventually add SNI support for SUPL and it's available on 5th gen Pixels but not 4th gen Pixels. For SMTP, we do require TLS1.2+ but SNI wasn't mandatory until TLSv1.3.
Show PostWe have 2 special case services which did not use OCSP stapling with Must-Staple and are still using the default Let's Encrypt profile: SUPL and SMTP. Older generations of end-of-life Qualcomm Pixels didn't support SNI for SUPL in the Qualcomm cellular radio TLS stack. Some mail servers still don't.
Show Post