nothingismagick

That's a great approach.

While domain querying with http can be useful, I would recommend considering something like proof at the DNS layer. Something like how a DMARC TXT record can be used.

Kind of late to the conversation, but I think missing here from #3 is the explicit mention of file-type detection - esp. considering the fact that e.g. node-mime only checks...

I think generally speaking, devs who leverage open source projects take a lot of risks and are paradoxically laissez-faire about their own security because they take infrastructures (and human good...

I had an experience this week that I found to be rather shocking - but also see it as an opportunity for node to shine. In the course of a...

Sure - I'd be glad to disclose there.

We're aware of this behavior and a proper error message informing you that you need to build the source first before you can run `tauri build` is propegated to the...

Regarding the downloading of the blob -> thanks for the result! Can you please file that at https://github.com/tauri-apps/tauri And the env vars are a huge thorn in everyone's side -...

At tauri we are building out our pipeline for doing this, and maybe you can have a look at our pipeline for some inspiration: https://github.com/tauri-apps/tauri/blob/dev/.github/workflows/test-on-pr.yml Would love some feedback about...

Maybe worth investigating: https://github.com/helium/helium-wallet-rs/blob/a4afe22e61ddc153f43604c662dab3af51f9731e/Cargo.toml#L38