TL;DR. golang.org/x/net/idna.Lookup.ToASCII runs UTS-46 NFKC mapping 0-9. A pre-IDNA net.ParseIP check rejects the NO_PROXY lists, TLS-SNI routers, and cookie-domain validators that TrimRight + ParseAddr golang.org/x/net/http/httpproxy, the canonical safe pattern, and two I ran into this one while writing a Go HTTP client for a private project. I idna.Lookup.ToASCII canonicalising the host The sha
In Q3 2024, we replaced Docker Desktop with Podman 5 across 1000 developer laptops at a Fortune 500 fintech firm. The result: a 72% reduction in container escape vulnerabilities, 40% faster local build times, and $1.2M annual savings in licensing and incident response costs. This is the unvarnished retrospective. Specsmaxxing – On overcoming AI psychosis, and why I write specs in YAML (83 points