> Also, the Steam client has to be one of the most stagnant applications I ever had the pleasure of using, not sure that makes Valve super efficient.
If said software is fit for purpose already, why the need to induce frivolous change for the sake of changes themselves? If permanent stagnancy is bad, perpetual change is equally bad IMHO.
Jassy's answer to that question contained this tidbit about "how to build a strong team? ... go into the office ..." At that point I was certain the RTO message was coming and it was just a matter of time. Turns out that time was today.
Have you taken a look at what Dropbox actually does today? Just open their website and hover "Products" and you will see that the company does much more than "just" file syncing today (and they're profitable doing so).
Looks really polished and I love the minimalist design.
One thing I've been wondering that a lot of web platforms offer: how do you allow users to bring their custom domain with TLS? What's the tech behind that and how does the process work?
That was one of the hard things to figure out how to do in a simple way on mataroa. Just using Let's Encrypt directly was the first iteration. Now mataroa is using a combination of:
- Let's Encrypt with a wildcard certificate for mataroa.blog and all *.mataroa.blog domains
- Caddy's automated certificates for all user custom domains
You can see a few more details about this setup in the server playbook doc [1] and the Caddyfile [2]
You can do this a variety of ways, most of which boil down to automating a reverse proxy server and generating acme certs. My favorite is Caddy server if you want to build and manage it yourself.
Things get trickier if you want to handle this well for globally distributed servers, since you'll need to have a cluster of reverse proxies near or colocated to your app servers. That needs an anycast IP address to handle A records for apex domains, and usually you want them coordinating to share certs, cache, etc. efficiently. In that situation I'd recommend reaching for a paid service, since there can be a lot to build and maintain.
Source: I built approximated.app, which is a service that does all of that for you.
Whatever terminates the connection (e.g. nginx, haproxy, apache) needs to be configured for each supported domain. As a platform this would mean having code to modify and reload the config and put certs in place on behalf of users.
CERN should try to mediate between the software company and the student.
The high fine of 30k was probably set because the company thought CERN was violating their licensing. For an institution or large company the size of CERN, 30k might be a justifiable fine.
If the company knew the infringement was done by a single student, they probably would not have set such a high fine.
Also, I doubt 30k would hold up in court as a reasonable fine, given that the student had access to the software anyway. Although him downloading the software illegaly shows some criminal energy.
But maybe I'm wrong and the company knowingly fined 30k for the single person's license infringement and CERN tried to avert that. Would be nice to know some more details.
Also, the Steam client has to be one of the most stagnant applications I ever had the pleasure of using, not sure that makes Valve super efficient.