Yes, but that requires eliminating aliasing and expressions with side effects?

Sveltia CMS looks good!

I don't understand. Why the disappointment? Pi is still open source. Nothing is changing. Earendil's majority owners have a perfect track record when it comes to open source. Armin is a super star in the Python and Rust ecosystems.

How do you solve TOFU?

Well, TOFU is really just the model for how the chain of trust is established.

In practice there isn’t really trust on first use: there’s verify the key matches what’s expected, or distribute keys out-of-band (including certs).

If that verification step isn’t happening, then it’s not TOFU, it’s just blind trust.

From an automation/autoscaling angle, the same thing shows up again:

1. either keys are pre-baked / distributed

2. or, something signs them at boot

Signing an instance key is just another way of distributing trust. It doesn’t remove the need for a root of trust, it moves it.

Certificates just add extra steps around the same underlying task.

I agree. I was just wondering if Userify had a solution for distribution the server signatures to the users.

Great question. Not yet ;)

Fair enough :)

I don't get it either.

Would be really good if Google Docs could support custom brand fonts by letting their customers upload them in the admin console.

Exactly. PC manufacturers have so many SKUs and are changing so many things from one model to another that their brand doesn't mean anything anymore. Buying a Dell, HP, Lenovo or Asus branded laptop doesn't say anything meaningful about what you're actually going to get. Unlike Apple (or Framework) where the brand still means something.

We could finally write programs for the browser in any language that compiles to WebAssembly. And even mix and match multiple languages. It would be amazing.

The author mentions they already use and pay for Google Workspace: Why not use Google Chat? It is now much better than it used to be.