A
Alex Sci
alexsci.com · Personal blog · on HN since 2019
Alex Sci writes about software, web standards, and internet infrastructure, including RSS blogrolls, email security, UUID collisions, and EC2 pricing.
What HN saysHN commenters engage with its RSS blogroll network and its discovery pages, and one links the aggregate feed to ask about update frequency.
18HN people shared it
4linked it in comments
33stories submitted
392story points
3 months agolast shared
2019people per year2026
Most-shared posts
- 1Designing Personal Software Why we need more to-do apps2 people · 9 points · first shared 2024 · 1 comments on HN
- 2RSS blogrolls are a federated social network2 people · 6 points · first shared 2024 · discussion on HN
- 3A mental model for EC2 on-demand pricing2 people · 5 points · first shared 2023 · discussion on HN
- 4Is Email Confidential in Transit Yet?2 people · 4 points · first shared 2024 · 3 comments on HN
- 5Relicencing Monitor2 people · 4 points · first shared 2024 · 2 comments on HN
- 6Oops, My UUIDs Collided2 people · 3 points · first shared 2025 · discussion on HN
- 7Measuring out-of-sync clocks on the Internet2 people · 2 points · first shared 2025 · discussion on HN
- 8Uptime of GitHub Pages Alternatives2 people · 1 points · first shared 2026 · discussion on HN
- 9Name Constrain't on Chrome2 people · 1 points · first shared 2023 · discussion on HN
- 10Identify Common Software Licenses2 people · 1 points · first shared 2021 · discussion on HN
- 11Discovering the indieweb with calm tech1 people · 229 points · first shared 2025 · 21 comments on HN
- 12Why UUIDs won't protect your secrets1 people · 75 points · first shared 2025 · 59 comments on HN
- 13SMTP Downgrade Attacks and MTA-STS1 people · 25 points · first shared 2024 · 16 comments on HN
- 14Choosing Vim over VSCode1 people · 5 points · first shared 2025 · 4 comments on HN
- 15Relicensing Monitor: Project Listing1 people · 4 points · first shared 2024 · discussion on HN
What HN people wrote when they linked it
8organicbits · 2026-04-04
I've been doing this. Here's an example page: https://alexsci.com/rss-blogroll-network/discover/feed-41e7afd377ae70e…
I don't like counting the number of subscribers, that ends up surfacing things like major news websites, or the hacker news feed. But I've found the graph to be useful in finding recommendations.
bwblabs · 2026-06-21
Another quote from the article:
> Further, native apps can generate a unique self-signed certificate.
Just creating a certificate will not work, unless it's installed as root CA certificates in all browser trust-stores on the machine. And if the private key of the root CA is not secured correctly, one could MitM any websites. So at least you want it name constrained (https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.10), but at least in Chrome until 2023 (v112) that did not work on root CA's (https://alexsci.com/blog/name-non-constraint/), so you had to add an intermediate CA and add the constrain there. Of course, you should also just throw away the key of the root CA.
I will admit I once added basic constrains in some project with a local root CA (2020-2022), but 'incorrectly' to the root CA, and did not test it in all browsers.
FromTheArchives · 2025-08-27
freediver · 2024-08-31
This is cool!
Is the aggregate list supposed to update regularly?
https://alexsci.com/rss-blogroll-network/rss.xml