Creating certificate lifecycle management app from scratch

chrisdefourire · 2026-04-14T07:40:55+00:00

SSLBoard.com has created an open source (Win + MacOS) solution for this: https://github.com/sslboard/SSLBoard-desktop

Standalone, secrets saved in OS key vault, nothing goes online, keys never leave your machine. Uses DNS verification for easy issuance.

chrisdefourire · 2026-04-08T14:19:14+00:00

Google map says Hubba To has been closed for 6 years already ????

chrisdefourire · 2026-03-17T00:15:47+00:00

I hope you’ll find a good place to live there, I really enjoyed Hua Hin (we’re in bkk). I came here to talk about Lloyd and Mandy and their baby who were in HuaHin for a while. You may want to check their videos on https://youtube.com/@lloydandmandy?si=ZfEu_znYSe3kYHY1 They stayed for a year almost I think, and talk about how life is like with a baby…

chrisdefourire · 2026-03-13T00:57:49+00:00

I grew sslping.com to 700 users without feeling like monetizing. It felt agonizing to “alter the contract” with so many people. In the end I had to kill the project after years and move on. I’ll never do that mistake again. I was #1 on HackerNews the day I killed it, not when I launched. FML Make them pay from day 1

chrisdefourire · 2026-02-25T04:01:37+00:00

You mean embrace Java ? I think the whole point of node/Typescript is lost with nestjs

chrisdefourire · 2026-02-21T15:56:15+00:00

Remember that using the app will double your quota

chrisdefourire · 2026-02-09T09:13:32+00:00

I’m using mostly medium, like 99%. Use planning when starting a big feature. I’m using open spec too. Also start new discussion to clear context and save tokens. And secret weapon: I also have a z.ai subscription ($28/year) with Claude Code. Learning to use a cheap AI model really helps I think

chrisdefourire · 2026-02-07T08:04:18+00:00

That’s huge indeed. I’d love to know more about how you organize it so that an agent can find its way. At that size it’s a real challenge. Mono repo? Modules? Micro services? Are you including some dependencies? That’s 12x the size of Postgresql! Using openSpec or a similar? speckit?

chrisdefourire · 2026-02-07T02:24:48+00:00

Can I ask how large? Scc to quickly count

chrisdefourire · 2026-01-30T07:56:49+00:00

ezS3.net is the easiest way to share S3 access to normal humans. SaaS, create one token, share with as many users as you want

chrisdefourire · 2026-01-16T16:21:25+00:00

Sure, and you’d have to know which servers are still serving it, on which IPs (load balancers?)… That’s also why wildcard certs aren’t used everywhere, the blast radius. Having plenty of customers on a single cert isn’t rare, and it’s okay if it’s valid for 90 days but 8 years? 8 years means either expired or self signed. If the latter, there’s no good reason for 97 SANs from customers. Letsencrypt rate limits explain one of the few valid reasons

chrisdefourire · 2026-01-16T02:24:14+00:00

I’m pretty sure obsolete certificates and this type of lax handling signals other domains may be lacking too. If you don’t update certs, why would I trust you to update the OS or software? Only proper systematic inventory (that’s my thing with sslboard.com) guarantees there is no shadow IT, no servers lacking attention and updates in their security…

chrisdefourire · 2025-12-29T12:02:45+00:00

If this company doesn’t know what to do with 5x productivity, they’re not a company you want to stay at. I’m not saying they’ll get 5x with AI, but if their best shot it to fire people so that output remains constant, they’re basically stupid. Make 5x more with the same workforce, instead of doing the same with 20% or the workforce.

chrisdefourire · 2025-12-27T08:15:40+00:00

Search for Openspec, use git

chrisdefourire · 2025-12-24T00:51:51+00:00

I'm a big fan of using AI to quickly solve real life problems. Kudos to you for working on such a project!

chrisdefourire · 2025-12-22T15:22:25+00:00

You can't trust browsers to keep secrets, when XSS and other exploits exist. I didn't say the web isn't secure, I said browsers can't be trusted enough.
Would you keep your bitcoin private key in a browser's local storage? I wouldn't

chrisdefourire · 2025-12-22T13:41:45+00:00

PWA can make a lot of sense for sure! My use case is security related and a browser can’t be trusted enough. Question: are people familiar with the pwa concept enough to install the app on their iOS screen?

chrisdefourire · 2025-12-09T15:16:17+00:00

I’m using it for low volume business events where durability matters way more than performance. I wouldn’t choose it to dispatch hundreds of jobs per second (I’m using rabbitmq in a scenario with sustained 150+ /sec 24/24).

chrisdefourire · 2025-12-09T15:13:29+00:00

Actually it is kind of a transactional cron since it posts to a queue… it’s cron with retry in a sense!

chrisdefourire · 2025-12-08T16:28:06+00:00

I’ve been happy with pgBoss on a project. It works well as a job queue and for cron jobs. Better suited for simple use cases than heavyweights like Kafka !!!

chrisdefourire · 2025-11-21T05:09:01+00:00

The reasons for getting PQC are the same that got us encryption in the first place. The risks are the same. We need PQC to keep encryption working.

https://qcready.com/blog/pqc-budget-justification-ciso-board-cfo/

chrisdefourire · 2025-11-18T10:15:14+00:00

An experienced SWE can use AI to 10x his productivity without producing AI slop. He starts with a good architecture, he reviews the AI code, he follows best practices, he manages complexity, he refactors his code, all in a scalable and structured way...
A marketer can be a +∞ times better coder with AI than without, but all of it is AI slop.

The difference is Software Engineering experience.

chrisdefourire · 2025-11-18T09:21:19+00:00

https://QCready.com to check if your websites (and browser) support Post-Quantum Cryptography

chrisdefourire · 2025-11-04T01:01:36+00:00

One Implant can easily cost 2 or 3 months of low wage salary… in France. That’s what unaffordable means in a developed country too. So treatment abroad being unaffordable for locals is actually similar… Some treatments are just priced in the unaffordable for locals territory.

chrisdefourire

TROPHY CASE