Demi Marie Obenour

@jamke I recommend not completing anything for `dnf` in the initial version.

I suspect this is because the repository used by `qubes-dom0-update has not been generated yet.

For dom0s that are based on EoL Fedora, what about including the (fixed) Fedora metadata in a package provided by Qubes, and copying the Qubes repository metadata into dom0 (checking...

Would it make sense for HAProxy to act as a QUIC terminator, converting QUIC to TCP and forwarding that?

QUIC can be load-balanced at layer 4 using CID-aware load balancers. CID-unaware load balancers break connection migration. That said, what I was referring to is tunneling TCP and UDP over...

> > Each QUIC stream becomes a TCP connection... > > OK I see what you mean but it's not the way it works. There are for example unidirectional streams...

I think it would make sense to keep this issue open for HAProxy as a QUIC ⇒ QUIC proxy, which would be analogous to the TLS retermination functionality that I...

> The thing is, it does not necessarily reflect the host being used. For example, you send "ServerName=foo.example.com", the certificate is presented as "*.example.com", then the client is allowed to...

> It's not a matter of routing to a wrong server, it's a matter of using the first advertised SNI as a load balancing key. I see your point. The...

If Qubes defaulted to KDE apps instead of XFCE apps, would the bloat go away @marmarek?