Heads up: the next version of Site.js (alongside a complete ground-up rewrite of automatic TLS via Let’s Encrypt certificates and Hugo integration) will move from using setcap to disabling privileged ports on Linux.

Privileged ports are basically security theatre as we’re living in 2020 not 1970 and Site.js is for individuals, not corporate behemoths who might still be running NFS on their networks. macOS removed them in Mojave.

Details (with links to relevant reading): source.small-tech.org/site.js/

Follow

@aral Just added that to my sysctl.conf.

net.ipv4.ip_unprivileged_port_start also apparently applies to ipv6, because Linux.

Sign in to participate in the conversation
Mastodon

Server run by the main developers of the project 🐘 It is not focused on any particular niche interest - everyone is welcome as long as you follow our code of conduct!