• 2 Posts
  • 207 Comments
Joined 3 years ago
cake
Cake day: June 15th, 2023

help-circle
  • What is “the API”?

    Good question. When you have multiple implementations of an API, the API (the authoritative version) is what gives the reference spec that all other apps must follow.

    If the authoritative version will be fully implemented only by the closed backend and in the closed apps, it will cripple the FOSS backend and apps.

    This is a common tactic used by companies that want to sideline the FOSS options and slowly make them irrelevant.

    Yes, today all apps talk to both Bitwarden and Vaultwarden the same way. Be on the lookout in case that changes.



  • Both backend and frontend revolve around the API, and Bitwarden owns that not Vaultwarden.

    If Bitwarden decides to modify the API so that only their closed-source backend has the full spec, and only gives that spec to their own apps, everything else (Vaultwarden and 3rd-party apps) will fall behind or become unusable.

    To counter that, Vaultwarden and the 3rd-party apps need to declare their own API and prepare to fly solo completely independently from Bitwarden.

    Such a move would force Bitwarden to show their true colors. If they really mean to stay true to the open version they will keep cooperating and keeping their API in sync with the Vaultwarden API.


  • The current FOSS backend used to be the center of the ecosystem. Going forward that may change. If it stops being that center and it becomes merely a token offering so Bitwarden can claim “we’re still doing FOSS” then it will become pointless.

    Simply forking the backend is meaningless without the work to also drag along the entire ecosystem, or establish a new one. Forking a project takes time, effort, vision, persistence, determination.



  • Vaultwarden (and all the client apps) depend on Bitwarden for the API spec. If Bitwarden introduces closed features in the API that Vaultwarden can’t/won’t implement, but the client apps do, it will split the spec. They can also introduce API license keys, which would render Vaultwarden mostly irrelevant.

    The only way for Vaultwarden to remain relevant going forward is to own it and split ways from Bitwarden. This would in turn mean that the FOSS client apps have to decide which to support. But I think the ecosystem is going to fragment eventually anyway, so the sooner every app decides which way they want to go, the better.



  • Yeah but if you want to use something different, or may need to use different web servers or proxies from time to time, it’s better to have the cert renewal stuff separated.

    Also, for any provider that’s off the beaten path you have to build caddy yourself to include the right plugin and that’s just meh.

    Caddy’s fine if you only use one provider and only Caddy all the time but other than that no.










  • lemmyvore@feddit.nltolinuxmemes@lemmy.world•Linux tips
    link
    fedilink
    English
    arrow-up
    3
    ·
    5 days ago

    LFS is actually a pretty good learning experience. But that depends on whether you’re interested in topics like kernel configuration, filesystem organization, the boot components and boot sequence, init system, common app resources, compiling apps, and generally how a Linux system comes together. It gives you a solid grounding that’s applicable to any Linux distro (not super-specific like Arch/Gentoo/Nix tend to be). But it’s pretty dry stuff and you have to be really fascinated by Linux to dig into it.

    On the cool side once you get through LFS you should be able to put together your own mini Linux distro and see how small you can make it and still boot and do something useful.




  • Yeah if you put it behind a reverse proxy you have lots of options. Basic auth would be the most straightforward but you can also do mTLS with a custom self-generated CA fairly easily. Then there’s OAuth but the setup is usually more involved than either of the above.

    Whatever you use you gotta have HTTPS working, that’s very important to keep it secured.