Surf, the Dutch national educational IT institute, conducted a data protection impact assessment. The report itself: (also linked in the article)

https://www.surf.nl/files/2024-12/20241218-dpia-microsoft-36...

After searching for a good Wireguard-based solution for VPNning into a Kubernetes cluster (and tinkering with a couple of them), this tool just worked. A simple `kubevpn connect` had me connecting to pods and services, while leaving internet traffic alone. Very impressive.

Unfortunately HN stripped the operative word "extremely".

Here is a topic with this word not stripped.

https://news.ycombinator.com/item?id=33704297

You seem to be knowledgeable in this area. Is it weird to ask you to summarize these links, especially in the context of the more concrete discussions in this thread?

So if this is what remained on the cave wall ... it was the plan that killed the whole tribe?

Or maybe they didn’t have whiteboard markers, only permanent ones.

They had both, but some new hire confused them.

If someone writes on a whiteboard with a permanent marker, immediately black it out with a dry erase marker. Then wipe it off. The dry erase marker's solvent will release the permanent marker ink.

There is Blendle, but I'm not sure it's doing very well ...

https://launch.blendle.com

Blendle does a lot of things really well. It'll be a real shame if it doesn't survive due to the market conditions.

Here is the GitHub issue: https://github.com/kubernetes/kubernetes/issues/71411

The Correspondent is the international offspring of the Dutch news website with (almost) the same name, which has been pretty successful. It is purely member-funded, without any money from ads. They are currently having a membership rally.

They also have an interesting stance on the subjectivity of journalism: "At The Correspondent, we don’t think journalists should pretend to be ‘neutral’ or ‘unbiased’. Instead, our correspondents level with you about where they’re coming from, in the belief that transparency about point-of-view is better than claiming to have none."

[Copying my comment from https://news.ycombinator.com/item?id=16112237]

Unfortunately, this means that Traefik's default Let's Encrypt integration (without setting a DNS provider) does not work anymore. Although the logs now say "could not find solver for: http-01", they actually use tls-sni-01.

The entire Golang autocert functionality relies on this - which presumably Traefik is using

Through a twist of fate, I was looking into this over the weekend, and you're correct about Traefik.

Unfortunately, this means that Traefik's default Let's Encrypt integration (without setting a DNS provider) does not work anymore. Although the logs now say "could not find solver for: http-01", they actually use tls-sni-01.