Guillaume-Jean Herbiet

Father x3 | Dig DNS(SEC) and Ansible | dns.lu Technical Manager at Fondation Restena | Toots and boosts not authoritative and w/o AD bit set.

Public Key

npub1rc4t4fx4w6354k6u4wcwda3nltz3eg3ykzskkz7qchfejaa8gz2q4td6l7

NIP-05 Address

gjherbiet@mamot-fr.mostr.pub

Profile Code

nprofile1qqspu2465n2hdg62mdw2hv8x7cel43gu5gjtpgttp0qvt5uew7n5p9qpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qzrthwden5te009skyafwd4js4j0597

Publishing to

relay.ditto.pub

yabu.me

nostr.now

Author Public Key

npub1rc4t4fx4w6354k6u4wcwda3nltz3eg3ykzskkz7qchfejaa8gz2q4td6l7

Show more details

Last Notes

2026-08-28 06:11:51 UTC

Je sais qu’ils font dans l’archive, mais quelqu’un peut dire à la #BnF que le #DNS c’est sur le port 53 en #UDP ET en #TCP depuis une bonne trentaine d’années :
```
% check-soa bnf.fr
ariane.bnf.fr.
193.50.133.237: OK: 2026081807
galatee.bnf.fr.
193.50.133.202: OK: 2026081807
% check-soa --tcp bnf.fr
ariane.bnf.fr.
193.50.133.237: ERROR: dial tcp 193.50.133.237:53: i/o timeout
galatee.bnf.fr.
193.50.133.202: ERROR: dial tcp 193.50.133.202:53: i/o timeout
```

2026-05-02 22:48:04 UTC

- reply

@nprofile…upuh Au-delà de la critique (au sens premier) de la vidéo de Fabien Olicard, une excellente et accessible explication sur ce qui rend un mot de passe fort ou faible et les mesures mathématiques associées.

2025-11-24 13:12:31 UTC

- reply

@nprofile…ldnq How could I forget:
Happy #DNSDay to all!
#dns

2025-11-23 09:31:14 UTC

- reply

@nprofile…x4wz At some point I also made this journey.
One helpful video was: https://www.youtube.com/watch?v=XA2WjJbmmoM
Also, (ab)using `makeprg` to run linters on file save and `keywordprg` for proper docs (eg: `ansible-lint` and `ansible-doc` respectively for #Ansible files) changed the way I use #vim.
With a few notable exceptions (like `gitgutter`) most of the "plugins" I use are now mostly for syntax highlighting of exotic file types.

2025-11-18 13:44:20 UTC

It’s not #DNS
#azure #aws #cloudflare
https://static.mamot.fr/media_attachments/files/115/570/974/773/447/006/original/47dd9db85912e99a.jpeg

2025-06-08 20:36:49 UTC

- reply

@nprofile…lvep Avez-vous essayé le plugin Vim pour VSCode ? (https://marketplace.visualstudio.com/items?itemName=vscodevim.vim).
L’intégration est assez bien faite et on peut conserver ses habitudes.

2024-11-19 15:57:27 UTC

- reply

@nprofile…528n With the kind support of the national ccTLD registry @nprofile…uqxf !

2024-11-14 22:09:06 UTC

- reply

@nprofile…ehlq @nprofile…93qq I am still using plain old #vim myself.
A few months ago I managed to get automated #ansible module snippet generation using only ansible-doc and #jq as well as automatic linting on file save: https://hackmd.io/@gjherbiet/ansible-vim

2024-11-14 10:42:10 UTC

Earlier, I saw here a discussion about the origin of "." as #DNS label separator (involving @nprofile…528n or @nprofile…h77u ?) but I can’t find it back.
Anyway, this morning I had an idea: "What if this comes from VMS (VAX computers OS) that uses "." as path separator?"
-> Those machine were popular in ARPANet/early Internet days and the analogy between hierarchical file system and #DNS could make sense.
Was it a flash of genius or already part of the discussion?

2024-11-13 09:53:26 UTC

- reply

@npub1rml…xa6t You are right.
The #EU shall also embrace the Open Source model: contribute or fund contributions but accept they do not own the projet.
The same goes with decentralized systems like #mastodon or #dns: the #EU shall accept that they can regulate it but that nobody owns it (neither lunatic billionaires nor the #EU itself).
I still don’t understand why the #EU prefers one very large entity able to contest their regulation rather than 1000 smaller entities abiding by it…

2024-11-13 09:41:32 UTC

- reply

@npub1rml…xa6t I think the underlying idea makes sense: no longer depend on Eastern or Western provided operating systems (at least for “critical” systems, including public administrations).
Unfortunately, the practical approach may consist in paying big money to big EU companies to create yet another distributed that nobody will use and will not be maintained past funding timeline.
One day (maybe) the #EU will understand decentralized is the best model for the continent.

2024-11-12 15:16:54 UTC

- reply

@npub1rml…xa6t Read that too and also had a look at #cznic #Knot for a #dnssec bump-in-the-wire signer.
Also seen that @nitrokey also has doc for #Knot: https://docs.nitrokey.com/nethsm/knotdns
One operational question I have is the the ability to pre-generate keys once on the HSM, lock the #pkcs11 interface and have #Knot use them for automatic roll-overs according to policy w/o creating new keys automatically.
My understanding of #Knot manual mode is that key timing has to be done… well, manually!

2024-11-12 14:58:08 UTC

- reply

@npub1rml…xa6t @npub1suc…08ln Do you plan to try with @npub1xhz…kaka #OpenDNSSEC?
#dns #dnssec

2024-07-26 13:01:35 UTC

- reply

@npub1rml…xa6t Might also be on L226:229 or (maybe less likely L237:240).
That’s where I am at now.

2024-07-26 10:50:52 UTC

- reply

@npub1rml…xa6t Nope. The query line appears twice before the error. I was surprised by this also and double-checked.

2024-07-26 10:38:59 UTC

If you use @npub1xhz…kaka #OpenDNSSEC, you may have faced or may help in solving my current (rather limited) issue: https://lists.opendnssec.org/pipermail/opendnssec-user/2024-July/004750.html
#DNS #DNSSEC

2024-07-23 06:18:44 UTC

- reply

As my #Ansible module snippet engine for #vim is getting (some) interest, here is the core snippet and result:
https://hackmd.io/@gjherbiet/ansible-vim

2024-07-22 19:52:51 UTC

- reply

@npub1rml…xa6t Yes. `ansible-doc -j -s` | `jq -r` is the stepping stone of my Ansible modules template engine.

2024-06-21 13:42:30 UTC

#dns question about multi-string TXT records: #rfc7208 section 3.3 says they shall be concatenated w/o space.
Is this applicable only to #spf records?
Looking at #rfc9432 (catalog zones) section 4.3.2.1 the group example "operator-y" "bar" seem to suggest this shall be interpreted as some sort of key/value (e.g. “operator-y=bar” or “operator-y bar”) where “operator-ybar” would not make any sense.
Neither #rcf1035 nor #rfc1464 mention multi-string TXT records.

2024-05-24 14:09:23 UTC

Moving away from #iTerm2 back to #macOS #terminal and would like the app to close when you quit your last shell? Add the following to ~/.zlogout :
```
if [ "$(ps | wc -l)" -eq 4 ]
then
osascript -e "do shell script \"osascript -e \\\"tell application \\\\\\\"Terminal\\\\\\\" to quit\\\" &> /dev/null &\""
exit
fi
```
Yes, that’s a lot of backslashes but we are doing #AppleScript inside #ZSH, inside #AppleScript inside #ZSH…

2024-04-27 14:22:01 UTC

- reply

@npub1rml…xa6t Where/how can I get this? (From the right sleeve it looks like it is sponsored by Men&Mice).