April King

Awesome, thanks. A lot of projects (such as Caddy) will continue to renew certs with the existing key type, and then switch over new certificates to ECDSA. Either way, thank...

P-256 is safe, and neither of your two options are currently allowed for use in publicly trusted certificates.

Here to add that, even with that patch, there are characters that user agents allow in cookies that the draft RFC still says are incorrect, such as commas and backslashes....

(note that I'll be fixing this on the Observatory end, but I thought you should know for everybody else that uses the API)

In particular, this isn't the CORS header or anything, but the API "domain" value: https://hstspreload.appspot.com/api/v2/status?domain=bugzilla.mozilla.org https://hstspreload.appspot.com/api/v2/status?domain=Bugzilla.mozilla.org

I can't speak for Firefox specifically, because I'm not part of Firefox Security Engineering, so @bifurcation and @mozmark will have to comment from their perspectie. That said, I do write...

Oh, you're right. I didn't see that they were from different URLs. Different error codes would be nice, although I guess I could always coalesce errors on my end.

Similarly, we may want to look at: Battery API Gamepad API There are probably other ones that are essentially interacting with hardware, but in ways that don't require permissions.

Note that @Keith94's recommendation above causes glitches with the open/close/minimize buttons being overlaid on top of the navigation buttons, at least on macOS. This accomplishes the same thing but without...

You can use `-fuse-ld=ld` and drop the two static arguments and it builds fine for me on macOS. ```diff --- a/src/CMakeLists.txt +++ b/src/CMakeLists.txt @@ -20,7 +20,7 @@ add_executable(godotpcktool main.cpp) target_link_libraries(godotpcktool...