> ODIC cannot operate with a private-network IdP

Why not? The flow can be entirely client side. OpenID discovery and PAR is optional and those would require direct connections

Yes, you could develop a client-side (JavaScript) application to do this.

SAML does not require JavaScript to do that.

I do (not) miss the part where it restarts halfway because something got written to disk.

That is isn’t even IIS but mostly SCHANNEL and http.sys.

Correct me if I am wrong but I always thought http.sys is IIS.

I guess if they can do changes to SCHANNEL but not to IIS for TLS stuff that would be good engineering. But it also makes argument mute ... because if Apache and Nginx and Caddy get updates to support new TLS and IIS is not because it is separate, then a question who does it right?

So natural caverns - empty spaces in the Earth - are used to store oil, but they shouldn’t be drained because it damages them permanently. Can anyone explain why it is useful as storage then? It is like a battery you arent allowed to discharge past 30%.

Engineering considerations in favour of this setup:

The cost of that 30% oil loss is less than engineering/site selection of a system that can be fully drained.

The cost of a more robust system that isn't as damaged by use is higher over it's lifetime assuming the *Emergency* use case than just creating/prospecting replacement damageable reserves if necessary.

If someone wanted a small reserve for 'market stabilizing' short term and repetitive small fill/drains they could build it for a lower cost than making the emergency reserve resilient enough to serve this purpose.

Can't claim these are true in this case but also remember that norms were much more enforced at this time and voter could be expected to punish bad politicians (This was a couple of years after watergate) so expecting political parties to hold short sited/corrupt politicians to account when they were doing something visible may have influenced what they expected to happen to a "get me reelected on lower gas prices damn the consequences politician". So the main concern could easily be the stated 1 or 2 emergency drawdowns in the next century and we'll over engineer it so it can handle 5.

Perhaps the more apt analogy is not a battery but a canister of petrol. Kidding aside, even one-time use energy storage can be useful during catastrophic events (war, etc)

Not a waste either, it doesn't cost them anything. The debt is on EA.

In the Netherlands: This exactly, generally after a few days you get a call by the "company doctor" (it is not from the company, but the literal translation) with an invite to discuss your health issues.

Figma is notoriously bad, by having the agent write javascript to communicate with the mcp.

Intent is hard to prove if it is not published.

Yup, Windows Azure App Service is just IIS.

> When it comes to the big AI players feeding their future models I 100% just assume that they suck up any data we send them. Am I cynical?

There is a reason enterprise contracts and plans exist. And I think even on that account we're going to find out at some point that LLMs are training on that extremely useful data.