Luca Bruno

@dvdhrm ack, I see your point of being wary of locking yourself into an externally-defined exposition format, it's a legit one. Regarding metrics name, there are [guidelines](https://prometheus.io/docs/practices/naming/) which are not...

@dignan section 3.1.3.2 of that RFC define the decoding and comparison rules (but, that is out of scope according to the preamble, duh). Anyway, the ASN type of that OID...

@briansmith do you have any input/insight on my original API questions? I see that [CheckCertHostname](https://github.com/briansmith/mozillapkix/blob/687015fa069d692afaf1868abdcc756b057e748d/lib/pkixnames.cpp#L222) in pkix takes a single non-specialized input and fallback-try multiple parsers, do you want to...

Additionally, in the meanwhile I've found a public website with a trust chain to a well-known root CA and an `iPAddress` SAN: https://1.1.1.1/

The `couldn't get metadata` is likely a red-herring due to the manual `podman` run which is unlike the k8s manifest regarding network namespace setup.

That's my understanding too. How does that OpenStack setup looks like? Does it have a config-drive OR a metadata endpoint?

@dustymabe does the Afterburn fragment under `authorized_keys` exist there? If yes then it's likely a bug in the tests, if not then something may be off in FCOS.

Some mention of rustfmt, perhaps? It would be nice to know that I can just blindly `cargo fmt` all PRs, or that there is a custom `rustfmt.toml` config manifest in...

I have some doubts related to this. There are currently some fields which contain binary content that at some point may be serialized/deserialized to a text containr, e.g. the `value`...

Thanks for the answer, you are touching many points that I omitted to avoid going out of scope, but those insights are appreciated. Getting to specific topics: > It might...