<?xml version="1.0" encoding="UTF-8"?>
 <rdf:RDF xmlns="http://purl.org/rss/1.0/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://web.resource.org/cc/" xmlns:syn="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/">
  <channel rdf:about="http://pinboard.in">
    <title>Pinboard (mlednor)</title>
    <link>https://pinboard.in/u:mlednor/public/</link>
    <description>recent bookmarks from mlednor</description>
    <items>
      <rdf:Seq>	<rdf:li rdf:resource="https://blog.turtlesystems.co.uk/2017/07/04/Using-Let-s-Encrypt-for-Internal-Servers/"/>
	<rdf:li rdf:resource="https://learn.adafruit.com/pi-hole-ad-pitft-tft-detection-display/overview"/>
	<rdf:li rdf:resource="https://sslmate.com/caa/"/>
	<rdf:li rdf:resource="http://pagekite.net/"/>
	<rdf:li rdf:resource="https://www.cloudflare.com/"/>
	<rdf:li rdf:resource="https://dnsimple.com/"/>
	<rdf:li rdf:resource="http://isc.sans.org/diary.html?storyid=7930&amp;rss"/>
      </rdf:Seq>
    </items>
  </channel><item rdf:about="https://blog.turtlesystems.co.uk/2017/07/04/Using-Let-s-Encrypt-for-Internal-Servers/">
    <title>Using Let's Encrypt for Internal Servers | Turtle Blog</title>
    <dc:date>2019-04-04T13:54:50+00:00</dc:date>
    <link>https://blog.turtlesystems.co.uk/2017/07/04/Using-Let-s-Encrypt-for-Internal-Servers/</link>
    <dc:creator>mlednor</dc:creator><description><![CDATA[When playing around with new software or developing new web sites SSL is something that is not only desired but is required and expected. In the past this has meant creating self signed certificates for local development machines and then requesting valid certificates for production.

This can cause issues however. Many applications allow you to connect to an API that has a self signed certificate, but an option has to be enabled to allow it to ignore SSL verification. For example Chef can be deployed using a self signed certificate but all the managed nodes have to have ssl_verify_mode :verify_none added to their configuration.

As this meant that there was more things that needed to be managed by the environment I was very pleased when Let’s Encrypt launched which allowed free SSL certificates. However it did not work immediately for internal systems because the challenge method needed to be able to access a website on a public address! I was not prepared to punch a hole through my firewall every 90 days. But now there is a DNS challenge for Let’s Encrypt.]]></description>
<dc:subject>dns letsencrypt</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:mlednor/b:fad6fc92b088/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:dns"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:letsencrypt"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://learn.adafruit.com/pi-hole-ad-pitft-tft-detection-display/overview">
    <title>Overview | Pi Hole Ad Detection Display with PiTFT | Adafruit Learning System</title>
    <dc:date>2018-10-25T06:40:40+00:00</dc:date>
    <link>https://learn.adafruit.com/pi-hole-ad-pitft-tft-detection-display/overview</link>
    <dc:creator>mlednor</dc:creator><description><![CDATA[Pi-hole is an open-source project which let's your Pi act as a DNS (Domain Name Server). While you may have an ad-blocker installed on your browser, do you have one on your phone? What about blocking in-application advertisements in your mobile games? On your Smart TV? On your smart fridge? 

Pi-hole lets you block ads from any device configured to use it as a Domain Name Server. When an advertisement (i.e: ads.adserver.com) tries to resolve it's IP address, Pi-hole will return nothing back. You'll never connect to the advertisement server and the ad won't even load. This makes it quicker, faster, and use less data than conventional ad blockers. ]]></description>
<dc:subject>linux security network dns</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:mlednor/b:0463e03b7cad/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:linux"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:security"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:network"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:dns"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://sslmate.com/caa/">
    <title>CAA Record Generator</title>
    <dc:date>2017-09-28T13:06:05+00:00</dc:date>
    <link>https://sslmate.com/caa/</link>
    <dc:creator>mlednor</dc:creator><description><![CDATA[Over a hundred certificate authorities (CAs) have the power to issue certificates which vouch for the identity of your website. Certificate Authority Authorization (CAA) is a way for you to whitelist the CAs you actually use so you can minimize your risk from security vulnerabilities in all the others.

Beginning September 8, 2017, all certificate authorities will be required to respect your CAA policy, so now is the perfect time to set up CAA. Setting up CAA using this tool is an easy way to improve your website's security.]]></description>
<dc:subject>dns generator security ssl</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:mlednor/b:0304f8c16008/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:dns"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:generator"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:security"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:ssl"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://pagekite.net/">
    <title>Pagekite - The fast, reliable localhost tunneling solution</title>
    <dc:date>2012-10-17T10:05:56+00:00</dc:date>
    <link>http://pagekite.net/</link>
    <dc:creator>mlednor</dc:creator><description><![CDATA[The fast, reliable way to make localhost part of the Web.
PageKite makes local websites or SSH servers publicly accessible in mere seconds, and works with any computer and any Internet connection.
It's also 100% Open Source.]]></description>
<dc:subject>hosting tools dns cloud</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:mlednor/b:edf665f0c02d/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:hosting"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:tools"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:dns"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:cloud"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://www.cloudflare.com/">
    <title>Performance, Security &amp; Apps for Any Website | CloudFlare | Home</title>
    <dc:date>2011-07-07T12:26:30+00:00</dc:date>
    <link>https://www.cloudflare.com/</link>
    <dc:creator>mlednor</dc:creator><description><![CDATA[Give us five minutes and we'll supercharge your website.]]></description>
<dc:subject>dns hosting performance security web</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:mlednor/b:cb363411e495/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:dns"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:hosting"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:performance"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:security"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:web"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://dnsimple.com/">
    <title>DNSimple - Simple Hosted DNS and Domain Management</title>
    <dc:date>2011-04-22T08:48:06+00:00</dc:date>
    <link>https://dnsimple.com/</link>
    <dc:creator>mlednor</dc:creator><description><![CDATA[DNSimple is a hosted DNS service that you can use to manage your domains. Plans start at $3 per month. We offer both a web-based interface and an iPhone application for adding and removing domains and DNS records as well as an HTTP API and command-line tool.]]></description>
<dc:subject>dns hosting tools api</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:mlednor/b:d37af84dd715/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:dns"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:hosting"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:tools"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:api"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://isc.sans.org/diary.html?storyid=7930&amp;rss">
    <title>Easy DNS BIND Sinkhole Setup</title>
    <dc:date>2010-01-11T12:16:44+00:00</dc:date>
    <link>http://isc.sans.org/diary.html?storyid=7930&amp;rss</link>
    <dc:creator>mlednor</dc:creator><dc:subject>network security dns</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:mlednor/b:3b1b2e7a8228/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:network"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:security"/>
	<rdf:li rdf:resource="https://pinboard.in/u:mlednor/t:dns"/>
</rdf:Bag></taxo:topics>
</item>
</rdf:RDF>