I run my own CA and install it as a trusted CA via Configuration Profiles. This works fine, including iOS 17.

Does this break in iOS 18 or does this affect only self-signed (untrusted) certificates?

I have the same setup and it works fine on iOS 18.

But did they tell you to "think about accelerating your adoption of IPv6 as a modernization and conservation measure" when they announced the charges? Because AWS did.

As mentioned in the footnote, this can be done by using PrivateLink; it costs a few bucks too, but it is the way to go if your VPC does not (or must not, for Compliance™ reasons) have internet connectivity.

If your target VPC has neither PrivateLink nor public IPv4 connectivity somewhere, I'm not sure how that would work; I'd love to learn how that was built.

Yeah, sure, we use PrivateLink. In my opinion, it's clickbait to say "almost no AWS API can be used from a VPC without public IPv4 addresses" with a footnote "actually most can if you use the service that enables that".

It's a Jekyll theme, https://news.ycombinator.com/item?id=37609543

Yeah, I was referring to AWS; I should have made that clear. ULA is frequently discouraged though, and NAT66, well ... just no.

I just recently heard that MS apparently has built everything IPv6 on Azure around NAT. This is so weird.

It’s the most Microsoft thing possible. That way they can charge you! How else are they supposed to rent seek?

This domain is very, very old and at that time, the phrase wasn't usually associated like it is today. Not sure what to do about that.

ECS, ELB and most other services do not support IPv6-only subnets, as mentioned in the article.

ECS does support dual-stack IPv6, but most other services do not support IPv6 at all.

Indeed. I really don't like the thought, but I more and more believe that there is no other way to incentivize IPv6 at the "server side". The client (end user) side seems to do well, considering that Google reports IPv6 end user traffic of almost 50% these days.

> The client (end user) side seems to do well, considering that Google reports IPv6 end user traffic of almost 50% these days.

That's because all mobile data connections are on IPv6

Yes, it's Markdown and I use https://jekyllrb.com with the theme "jekyll-theme-hacker" to generate the site. I quite like how simple it is.

Amazing, thank you!