Go to reject certificate chains containing eight distrusted SPKIs

·4 views

The Go programming language project has proposed changes that would make it reject certificate chains containing eight specific distrusted Subject Public Key Infos (SPKIs). The proposal was posted as an issue on the official golang/go GitHub repository. The change is aimed at strengthening TLS certificate validation by refusing keys that have been deemed untrustworthy. The discussion has so far drawn limited attention on Hacker News, where it received 10 points and 2 comments. The source material provided is brief, so further technical details about the timeline and implementation are not available.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

SlothPlan: a to-do triage tool that caps your day at three tasks

A developer built SlothPlan, a command-line tool for their Hacktoberfest entry that sorts a messy to-do list into three buckets: do today (capped at three), defer, and delete. The author argues that existing productivity apps add features that make triage heavier, while SlothPlan does the sorting and explicitly encourages doing less. The tool runs entirely on the user's machine using an open-weight local model, requiring no account, API key, or subscription, so the list never touches a network. In a recorded demo run on a 12-item list, it surfaced three deadline-driven tasks, deferred two others, and marked two as junk to delete.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Go Services Gain an MCP Adapter Without Touching Domain Code

A developer needs to expose an existing refund service to AI assistants via the Model Context Protocol. The refund service already has HTTP and CLI entry points, and the article argues a third front door can be added as a separate adapter package. The domain and application layers stay free of any MCP dependencies, keeping domain rules clean. The approach is built with the official MCP Go SDK, using a ports-and-adapters structure with a driving port that all front doors call. A CI check is described to fail the build if inner packages ever import the SDK.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How VeloxonHub turns checkout payments into booked event seats

VeloxonHub treats live events as another product type, so they pass through the same cart and checkout flow as courses and memberships. Hosts create an event through a six-step setup covering details, schedule, registration, pricing and notifications, and the built-in live room can generate a session without a manually pasted link. After payment, an access service creates the buyer's booking, and events needing approval remain pending until the host confirms them. Buyers see bookings in a calendar, and the Join button activates only for confirmed bookings within 10 minutes of the start time. The platform's design keeps payment processing separate from notifications so that email or alert failures cannot cause a completed purchase to fail.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Tools Can Change Mid-Contract: A Checklist of Exit Clauses to Check Before Signing

AI software vendors now update their products, models, usage limits, and sometimes prices as often as weekly, unlike traditional SaaS that changed a few times a year. The article argues that this makes the contract's exit clause the key protection for buyers facing changes they did not choose. It recommends testing data export during the trial period, confirming a retrieval window of at least 30 days after cancellation with no deletion or fees. Buyers should also ask for advance notice of material changes and a penalty-free exit or pro-rated refund if promised features are removed. Finally, it advises documenting and revoking every access grant, such as OAuth permissions and API keys, as part of offboarding.

0 comments Read more at DEV Community