I don’t disagree at all, I’m just noting this stuff isn’t easy.

If it takes so much effort to make things compatible with Wayland such that fucking clipboard support is newsworthy, it’s no wonder Wayland has been such a shitshow.

Because a private CA allows you to create a certificate and nobody else has the ability to create certificates unless you give them the keys or a signing CA. With Let’s Encrypt, you are trusting every major certificate authority to not create a cert on your domain; coupled with DNS poisoning means you would end up on a legit-looking but counterfeit website of yours.

You’ll have to explain that one to me.

1. Never host anything that is externally accessible
2. If you have to, put it behind a VPN (OVPN, Wireguard, IPSec, Tailscale, etc.)
3. Certificate based authentication is preferred for VPN tunnels
4. Always TLS encrypt your actual endpoints. Private CAs are most secure but a pain in the ass. Let’s Encrypt is very simple to set up in most cases.

Just my 2 cents.

I have been burned by WD Red on SMR drives, so I will just say Fuck You WD. That is all.