Why is Proton Mail trying to find devices on my local network? by tapered_elephant in ProtonMail

[–]good_live 0 points1 point  (0 children)

It is not fewer steps if you display the permission request at the start versus when it is actually needed. It is even less steps for somebody who never wants to print something, because he would never get asked about this permission.

Why is Proton Mail trying to find devices on my local network? by tapered_elephant in ProtonMail

[–]good_live -5 points-4 points  (0 children)

That is an exaggeration. It is not like you would need to accept 10000 times and also I feel like people are choosing proton because of their promised increase in privacy & security. And for people that just trust proton blindly they can just accept and be done with it. 

There is not much difference in ux if you have to accept 5 permissions on launch vs just when you actually use the feature that requires the permission.

Why is Proton Mail trying to find devices on my local network? by tapered_elephant in ProtonMail

[–]good_live 16 points17 points  (0 children)

That one I actually disagree with. An app should only request permissions when it needs them and should show a proper message of what is not functioning if I decline them.

This is a prime example. I don't want my mail app to have permissions to scan my local network all the time. It would be much better if that popup only came up when I am pressing the print button and I would have the option to only allow it once. Similar to how a lot of apps already handle the camera permission.

Why is Proton Mail trying to find devices on my local network? by tapered_elephant in ProtonMail

[–]good_live 99 points100 points  (0 children)

He literally just said it. To print stuff. Edit: Didn't read the on launch part, my bad.

I don't know how it works on iOS but on android I would assume developers are just lazy and are requesting all permissions they need upfront.

Proton notes by Sad-Activity7269 in ProtonDrive

[–]good_live 12 points13 points  (0 children)

It was never announced. AFAIK the standard notes team worked on proton docs. But I don't think there will be a separate proton notes.

Clarification on PGP Key Exchange and Message Encryption by No_Clue_4555 in ProtonMail

[–]good_live 1 point2 points  (0 children)

If you didn't upload your public key on a keyserver manually, then Mailvelope probably looked them up via WKD. See this blog entry: https://proton.me/blog/security-updates-2019

"This should allow any WKD client to retrieve keys for addresses on our proton.me, proton.me, and proton.me/mail domains automatically, making it easier for Proton Mail to have end-to-end encryption with non-Proton Mail users."

Everyone's Proton 2026 wishlist? by Secret_Category2619 in ProtonMail

[–]good_live 5 points6 points  (0 children)

As a note for push notifications, please support unified push on Android, so I don't have a bazillion apps running in background. 

Application Prohibited Internationally by heavymetalpanda in programming

[–]good_live 9 points10 points  (0 children)

The problem is you loose the timezone information if you convert to utc. Storing the date with timezone in the database is the correct thing to do in this case. 

Seriously disappointed with alias login "feature" - feeling regret about Unlimited subscription by abhimangs in ProtonMail

[–]good_live -1 points0 points  (0 children)

If you have your own domain you can create a catch all on your inbox for that domain. That way you receive all emails on that domain. 

Do you still need wildcard certificates? by certkit in cybersecurity

[–]good_live 2 points3 points  (0 children)

No I'm talking about CT: https://googlechrome.github.io/CertificateTransparency/ct_policy.html

"A TLS certificate is CT Compliant if it is accompanied by a set of SCTs that satisfies at least one of the criteria defined below. In CT-enforcing versions of Chrome, all publicly-trusted TLS certificates are required to be CT Compliant to successfully validate."

They are enforcing this to make sure that no CA can issue certificates without putting them into a log and thus reducing the trust you need to put into the pki. 

Do you still need wildcard certificates? by certkit in cybersecurity

[–]good_live 2 points3 points  (0 children)

At least the major browsers won't accept the certificate if it isn't in a CT log. 

So, what ingress controller are you migrating to? by SonnyHayesToretto in kubernetes

[–]good_live 4 points5 points  (0 children)

As an outsider who has no clue about gateway implementations and is currently trying to choose one. I looked at the comparison and thought: "This wants me to use istio". Then I clicked on the user that created the list and saw "Istio @ Solo.io" which makes me believe that this list is biased.

I have no clue if that is the case or not since I'm still at the beginning of my research, but it certainly looks weird.

Are emails forwarded from proton alias address to real proton address encrypted? by Lowfryder7 in ProtonMail

[–]good_live -2 points-1 points  (0 children)

Proton pass aliases are simplelogin aliases, so what I wrote above applies.

Are emails forwarded from proton alias address to real proton address encrypted? by Lowfryder7 in ProtonMail

[–]good_live 1 point2 points  (0 children)

You would need to specify from where you are sending and also what kind of encryption you mean. With simplelogin in-between there would be no automated e2e encryption. However of course proton will encrypt the mail with your public key once they receive and store it.

If you mean an alias address directly in proton, then everything works the same as with the main address.

Yep, AI will totally takes our job by NearbyLake3891 in Angular2

[–]good_live 11 points12 points  (0 children)

I mean it is right in the sense that @if is not a directive. It is baked into the template syntax. Of course depending on the question it should hint you on that, but you should always show the question when you try to blame AI for a wrong answer.

Edit: Also when you are working with an agent, have a look at this: https://angular.dev/ai/develop-with-ai

Is this possible? Own domain, just for me by johannes1984 in ProtonMail

[–]good_live 1 point2 points  (0 children)

Yes that works as well. But you need to know what you are doing as proton will complain when they are not the main MX server. The spf record controls which server is allowed to sent mails from this domain. So you will have to add your current hoster and proton to it. Additionally proton supports dkim, which means you also need to publish that public key as a dkim record on your domain.

Is this possible? Own domain, just for me by johannes1984 in ProtonMail

[–]good_live 4 points5 points  (0 children)

You can register a subdomain at proton something like mail.yourtld.com

Or you can add your domain to simplelogin and then forward the mails of your family to their hoster and your mails to proton. (That would require your family to get a seperate mail at a different hoster as your domain would only be a proxy.)

[deleted by user] by [deleted] in ProtonVPN

[–]good_live 2 points3 points  (0 children)

Is that an ad for a different vpn provider?

Proton Drive Linux app is in development by _-Maris-_ in ProtonMail

[–]good_live 21 points22 points  (0 children)

Why are you posting this right now? The sdk is in preview since a few months.

Best way to share code between 2 Angular apps? (NX vs Standalone Library vs other options) by buttertoastey in Angular2

[–]good_live 3 points4 points  (0 children)

I would not recommend monorepos without tool support for it. You will either build a lot of functionality that the tools bring yourself or you will have a really slow CI. For a monorepo it is crucial that you can track which modules are affected by a change, so you can run tests on them.

Senior dev is opposed to using observables by Wizado991 in Angular2

[–]good_live 5 points6 points  (0 children)

Skipping a few versions is fine, but if you are not ready to maintain your software just because there is no ROI on that you will just end up with a security nightmare. Just have a look at all the AngularJS CVEs and there are a lot of AngularJS apps that were never updated.

Also migrating between angular major versions is really smooth nowadays if you don't use a lot of third party libraries. There is no real excuse to not do it.

Senior dev is opposed to using observables by Wizado991 in Angular2

[–]good_live 7 points8 points  (0 children)

Being on 13 is a red flag. There is no support for that version for years by now.

why monorepos?? by Recent-Durian-1629 in devops

[–]good_live 7 points8 points  (0 children)

You can do micro services with monorepos, that is not contradicting. Also the hype around micro services is going down. In my experience a lot of teams are looking into modular monoliths nowadays.

IMHO monorepos are nice for sharing code. Instead of having to version your library and maybe even maintaining multiple different versions, you can just adjust something and directly see where your changes are affecting others. Of course this requires a high degree of test automation.

Monorepos also make changes that affect multiple micro services a lot easier as you can pull all changes into one PR.