Jamil

I believe on Apple, APIs such as [`includeAllNetworks`](https://developer.apple.com/documentation/networkextension/nevpnprotocol/3131931-includeallnetworks) are designed to prevent this kind of thing. We won't be able to control the firewall on Apple because we're in the...

### Email OTP ``` [actors] name: NOT NULL [actor_emails] email: NOT NULL actor_id: references account_id: references [identities] directory_provider_id: NULL external_identifier: NULL given_name: Joe family_name: Smith middle_name: display_name: actor_id: references ```...

Instead of using `JSONB` for actor_emails above, it makes more sense to just have a dedicated table for this, `actor_emails`. That way our index will be fast and efficient when...

We need to move the `name` to identities otherwise yeah.

On second thought, we'll keep the `name` on actors, but add the `given_name, middle_name, family_name, display_name` fields to `identities` so that we can start populating these from the sync. We'll...

We need a plan to roll this incrementally in order to condense breaking changes into as few as possible: - [ ] Add a unique index on `auth_providers.account_id, auth_providers.adapter WHERE...

> > This surfaces an interesting edge-case: If an admin configures an upstream DNS and a client doesn't have a compatible IP stack, this will result in the client having...

> > > > We never find out if there is a new nic in the gateway that has the desired ip stack > > > > > > >...

Seems to be a Safari issue -- happening on macOS too.

This is still happening for Firefox and Chrome (default settings) on macOS. I think we there might be a standards-compliant way to prevent them from using their own DNS: https://support.mozilla.org/en-US/kb/dns-over-https?as=u&utm_source=inproduct#w_why-would-a-network-tell-firefox-not-to-use-secure-dns