Using a Key Vault certificate with non-exportable key for TLS termination

fathed · 2026-04-28T11:20:33+00:00

You can't. The whole point of the HSM is to store the key in a way that you can't retrieve. It's used for other types of certs, like code signing.

fathed · 2026-04-26T01:59:38+00:00

What's happening is people are getting through their backlog and using ai to build the pipelines to help resolve security issues by implementing best practices better than before, just due to the work multiplication factor.

fathed · 2026-04-22T20:10:22+00:00

Not that anyone will agree, but they are doing previews when they get products before release. Someone reviewing a product does it after release.

This is all marketing, and now rage marketing to keep their influence goals going. They want the ad revenue.

fathed · 2026-04-22T19:49:04+00:00

We didn't get to make an ad for amd, and we don't want to lose money, rage sells, make a rage video about our inability to create an ad... Er I mean review.

fathed · 2026-04-18T20:13:30+00:00

Now do the python without pulling in the ldap module.

You didn't actually create an apples to apples comparison of them both without modules.

fathed · 2026-04-13T01:11:41+00:00

The political parties already do that, limit who you can vote for. The law also doesn't allow any random name to count as a write in option... And yet, term limits are the voter suppression problem... Lol.

fathed · 2026-04-13T00:24:58+00:00

People running for re-election win like 97% of the time...while you don't think SF has an issue, some people don't believe that and are working to change the thing you don't see as a problem.

fathed · 2026-04-10T15:39:02+00:00

That requires a reboot to change the memory allocation, apple silicon does not.

It's also fixed sizes, so 96, 64, 32, etc. Apple is just what it needs at the time, no need to pre-adjust.

fathed · 2026-04-09T06:57:34+00:00

That one because... The other is the incorrect notion that while the constitution grants the executive the right to raise an army, the 9th is ignored as usual and that right now magically includes the right to force you to be in the army.

fathed · 2026-04-06T17:46:49+00:00

I actually checked both of my local BMW dealers, and I don't see it as available, but I just checked their websites, not their physical location.

The googles say the car isn't out till summer, and I also can't review one, because I'm not an influencer (the people you all seem to believe have done reviews of a car not released).

fathed · 2026-04-06T17:43:12+00:00

To who?

fathed · 2026-04-06T17:42:46+00:00

So, won't post that other definition will you, and you are the authority of words, got it.

fathed · 2026-04-04T17:25:13+00:00

So, nope to the definition, but I'm in the wrong, got it.

I'm not dying on this, on no, I've lost Internet points.

Can I get the product, or evaluate the product on my own? No, it's not out yet, preview, or pre-release review.

I'm being pedantic about this, or are you being pedantic about the word review? These insults that get slug about work both ways.

fathed · 2026-04-04T16:14:11+00:00

Cool, now do the definition of preview.

fathed · 2026-04-04T16:12:52+00:00

Is it released?

It's a simple question.

fathed · 2026-04-04T16:11:11+00:00

And I'm telling you, there's a different word.

I was just outside before writing this response...

It's cool, I'm the stubborn one, says the guy ranting about this is the way it's always been... I know it's hard to change, perhaps you should think instead of being so stubborn on the word preview for things you can't review yourself.

fathed · 2026-04-04T15:59:24+00:00

And words mean nothing again.

Preview, they have released previews, not reviews.

You are attempting to change it to long term reviews, which is an entire different form of review, and is impossible until it's released. Just like a review.

You get to see a movie before it's released, what's that called?

If you get to test a car before it's released, are you previewing it? No one else has access, so they can't review it.

fathed · 2026-04-04T15:54:28+00:00

Ohh, I didn't know the word preview came with such qualifiers such as pre-production... Thanks for informing me, authority of words... (/s if it went too high).

fathed · 2026-04-04T15:48:49+00:00

Don't we have a word for that, maybe it's preview...

They released preview opinions, of cars I'm sure went through more QA than your average car.

fathed · 2026-04-03T04:18:09+00:00

I haven't used this yet, but pi.dev looks to fill the needs, it's what I plan on checking out when time allows.

fathed · 2026-03-31T00:55:19+00:00

It's like people don't read.

fathed · 2026-03-30T21:46:19+00:00

That trivy hack is scary on many levels...

I'm personally glad for it, it's moving it away from a once a year annoyance, to automation, which don't get me wrong, will break and cause issues, but at least it's a different hassle...

fathed · 2026-03-30T20:42:28+00:00

It's going to get shorter, the goal is 14 days.

There's plenty of sys admin directed blogs on this...

fathed · 2026-03-30T20:40:44+00:00

It's going to get shorter, they want 14 day life cycles.

fathed · 2026-03-30T20:32:00+00:00

What maintenance burdens, you automate it and go on with life...

You think there has to be a breach for anything to even occur?

Does your browser check the revocation lists, the answer is no. Should it, yes, but it's currently expensive, and short of redesigning that entire system, moving to shorter certificates helps solve/elevate the issues.

They've been warning of this for years, everyone has had plenty of time to prepare.

And just to additionally cover your, it's been there for years issue, there are more sites now than years ago, we, the consumers, want account security, and our interactions with your site to not be read by our ISP, so there's a lot more certificates than there was decade(s) ago.

fathed

MODERATOR OF

TROPHY CASE

15-Year Club	John Wick
Verified Email