wildbus8979

https://www.thestar.com/vancouver/documents-to-be-released-years-after-allegations-that-canada-s-spy-agency-monitored-pipeline-protesters/article_081ff05b-2c67-5475-8379-5c4bfc9d8735.html

What these papers reveal is that the state and police force are collaborating with private security contractors from the oil industry to suppress groups that work to represent regular Canadians and their concerns about the environment,

[...]

There are hundreds of intelligence reports on people and groups who were apparently opposed to this pipeline,

https://www.theglobeandmail.com/business/article-csis-says-ottawas-trans-mountain-pipeline-purchase-seen-as-betrayal/

A Canadian Security Intelligence Service assessment highlights a renewed sense of indignation among protesters and clearly indicates the spy service’s ongoing interest in anti-petroleum activism.

The Canadian Press used the Access to Information Act to obtain a heavily censored copy of the June CSIS brief, originally classified top secret

https://www.cbc.ca/news/indigenous/wetsuweten-caledonia-csis-documents-1.6635343

Na'moks, a Wet'suwet'en hereditary chief who opposes construction of the Coastal GasLink pipeline in northern British Columbia, is glad CSIS backed off from the terrorist label.

But he worries that by branding elements of First Nations rights movements as "extremist," CSIS leaves the door open to continued surveillance.

"We know we've been under constant surveillance for decades," said Na'moks, whose English name is John Ridsdale.

I don't know which rock you live under, but this has been going on for decades.

Useful to whom? I'm sure the oil execs find their work useful.

You keep thinking whatever you want, I'm sure that boot tastes great!

I'm sure all the people who had all their families get a visit at their house from CSIS agents because they ran protests against the Vancouver Olympics and all the first Nation folks who fought against pipelines on their land have a stronger sense of what the reality actual is.

You're getting downvoted by blind patriotism, but you aren't wrong.

conducting covert action within Canada and abroad.[3] CSIS reports to the Minister of Public Safety and Emergency Preparedness

CSIS is primarily domestic. It's its raison d'être. It was created after the McDonald Commission into the crimes and illicit actions committed by the RCMP against the independent movement in Quebec. CSE is more foreign oriented.

Absolutely. Simply use ACME with the DNS validation method. Using bind you'll want to create keys and allow TXT access for those keys to the validation domains. Fear not, this isn't exclusive to bind, ACME tools supports dozens of other backends. That's all you need the actual domain doesn't need to be resolvable with an A/CNAME record. Internally you can run an entirely different DNS server to resolve your hosts, use hosts files, or use bind zones.

Except it isn't. Saying it is trivial is just gross generalization. It's trivial to configure bind to have internal zones that aren't resolvable publically. It all depends on configuration, such as reverse ns entries, zone accessibility, etc.

You can have (sub)domains that are listed in the certificate lists and yet aren't resolvable externally as well.

It'd be better and more accurate say the list of certificates then.

Sub domains aren't public unless your DNS server has XFER on.

Worth noting about this approach is that the global list of subdomains is publicly searchable.

Can you expand on this? What is it that you call the "global list of subdomains"?

Use yt-dlp to download the file and play is in MPV/VLC/Celluloid.