Hacker News new | ask | show | jobs
by noosphr 90 days ago
What age should I put for my daemon accounts?
6 comments

Just yesterday I finally got tired of all the browser security warnings and decided to buy a domain name and set up SSL in my local network. I spent like 10 minutes flummoxed by why my reverse proxy couldn't get a new cert from Let's Encrypt until I looked in the logs to see that Let's Encrypt refused because the account my reverse proxy had been using since I set it up had the email address as "admin@hostname" because this was all for my own personal use and my local reverse proxy doesn't need an actual email address, it just needed some value for some entry in some database.

This is my long-winded way of saying, "Who cares?" Give it whatever age you want. When people object to these type of initiatives for political reasons, they should state the political argument for why they are bad. But rebelling against them for practical technical reasons always seems a little silly to me and can end up being counterproductive when it shifts the conversation away from the central issue.

A reasonable implementation of this would make the age field optional, and only set it on interactive user accounts. An app that requests the age field and gets no response grants access. i.e. it's not set up to restrict access unless a user is explicitly set up as a child, in which case you're obligated to deny access to sensitive content.
56 years and 81 days. If you get this reference I tip my hat.
Just 01-01-1970 :)
666 years. It's in the name :)
useradd —-system flag shouldn’t ask for one