zeluko

Well, there is always a curve for learning a new UI, even if similarly structured.
But then you could never escape Windows, because most users are trained for that UI and have certain expectations for it.
The Step from Win7 to Win10 maybe would be similar, lots of things changed. (even though we know Win10 had alot of Win7 things under the hood)

yeah, just use kubectl and pipe stuff around with bash to make it work, pretty easy

Indeed, not classically, but there are HSTS preload lists you can put your domain into which will be downloaded by supported browsers.
And via HSTS you can include all your subdomains, which would then force proper TLS connections for those you havent visited before too.

With the new TLS1.3 version we are getting the HTTPS / “SVCB” Record which not only allows ECH but also indicates to the client similar protection policies like HSTS. (RFC 9460)
ECH will then make such attacks impossible on TLS-level, assuming DNSSEC is used and client can make an integrity-checked lookup e.g. via DoH/DoT or validating DnsSec themselves.
The strength of this depends on the security-chain you want to follow of course. You dont need DNSSEC, but then the only integrity-check is between DNS-Service and Client if they use DoH/DoT (which is usually enough to defeat local attackers)

bUt iTs Ai InTeGrAtEd

Your own servers probably also dont have HSTS enabled, or clicking continue will be disabled (if not overwritten in your browser-config)

Thats why we now have certificate transparency reports and CA-records.
Sure not perfect, but at least with a compliant CA it wont just happen in the dark.
At some point you have to trust someone.

Thats why we have HSTS and HSTS preloading, so the browser refuses to allow this (and disabling it is usually alot deeper to find than a simple button to “continue anyways”)

I mean the Netherlands arent thaat big to make a super big impact on that graph, so the comparison still stands.
But the graphic is not telling us which other “non-US” Cities are included to know how diverse the data used is.

That was an example for things that can be engineered…

afaik sustainable, but expensive… Italy and Greece arent really known to have fat stacks of cash for such projects