Mastodawn

Ben Kehoe Feb 15, 2024

Time to write "mTLS considered harmful" https://www.rfc-editor.org/rfc/rfc9421.html

RFC 9421: HTTP Message Signatures

This document describes a mechanism for creating, encoding, and verifying digital signatures or message authentication codes over components of an HTTP message. This mechanism supports use cases where the full HTTP message may not be known to the signer and where the message may be transformed (e.g., by intermediaries) before reaching the verifier. This document also describes a means for requesting that a signature be applied to a subsequent HTTP message in an ongoing HTTP exchange.

Ben Kehoe Nov 29, 2023

Show thread

Jan D Nov 29, 2023

@itamarst also I wonder if it will be harder to find the problems in the greater amounts of generated code, due to lack of practice gained from writing code the code oneself; also, problem finding in code becomes monitoring the results and extended monitoring is miserable – both effects are typical "irony of automation"
https://en.wikipedia.org/wiki/Ironies_of_Automation

Ironies of Automation - Wikipedia

Ben Kehoe Nov 29, 2023

AWS Community Radio Nov 29, 2023

Use IAM Roles Anywhere to help you improve security in on-premises container workloads
https://aws.amazon.com/blogs/security/use-iam-roles-anywhere-to-help-you-improve-security-in-on-premises-container-workloads/ #aws #blog

Use IAM Roles Anywhere to help you improve security in on-premises container workloads | Amazon Web Services

This blog post demonstrates how to help meet your security goals for a containerized process running outside of Amazon Web Services (AWS) as part of a hybrid cloud architecture. Managing credentials for such systems can be challenging, including when a workload needs to access cloud resources. IAM Roles Anywhere lets you exchange static AWS Identity […]

Amazon Web Services

Ben Kehoe Nov 28, 2023

Matt Weagle Nov 28, 2023

“I was around for some of the good old days and I can assure you they were terrible.”

https://newsletter.goodtechthings.com/p/wait-is-cloud-bad

Wait, is cloud bad?

I regret to inform you that there is discourse

Good Tech Things

Ben Kehoe Nov 28, 2023

Matt "msw" Wilson Nov 28, 2023

Amazon Q Code Transformation uses #OpenRewrite to accelerate Java upgrades for customers. At AWS, many of our services are built with #OpenSource components and promoting the long-term sustainability of these communities is critical to us and our customers. That is why it’s important for us to contribute back to communities like OpenRewrite, helping ensure everyone can continue to benefit from their innovations.

https://aws.amazon.com/blogs/aws/upgrade-your-java-applications-with-amazon-q-code-transformation-preview/
#reinvent #reinvent2023 #FreeSoftware #FOSS #OSS

Upgrade your Java applications with Amazon Q Code Transformation (preview) | Amazon Web Services

Update April 30, 2024: Amazon Q Developer now generally available! As our applications age, it takes more and more effort just to keep them secure and running smoothly. Developers managing the upgrades must spend time relearning the intricacies and nuances of breaking changes and performance optimizations others have already discovered in past upgrades. As a […]

Amazon Web Services

Ben Kehoe Nov 28, 2023

(╯°□°)╯︵ ┻━┻