I'm saying the modes of failure and effects are different. Digital safety and protecting people's lives are two different things. Both important, but different. But even besides that, you ought to be using a different tool for that.
Is it fine to have the server I use for my personal site and projects use a dynamic motd, perhaps even reach out to the network? Yeah. It can be useful. Should a CA signing machine do that? Obviously not.
I'm saying that acting like one is unambiguously better for being less featureful is wrong. That's all.
I reread what i wrote and it can comeoff as condescending, though it wasnt meant that way. I meant to actually say is that my attitude is specifically forged by my experience.
What you think is fine, i don't think is fine, because we see the use case from two different perspectives.
You also see benevolent usage, i see abuse potential. System security and usability are always at each other’s neck in a never ending act of balancing.
I'm saying the modes of failure and effects are different. Digital safety and protecting people's lives are two different things. Both important, but different. But even besides that, you ought to be using a different tool for that.
Is it fine to have the server I use for my personal site and projects use a dynamic motd, perhaps even reach out to the network? Yeah. It can be useful. Should a CA signing machine do that? Obviously not.
I'm saying that acting like one is unambiguously better for being less featureful is wrong. That's all.