3 ms·
Couldn't they implement something like cloudflare keyless ssl to keep this (horrible) ca private key... private?
by 0x0 10y ago
Couldn't they implement something like cloudflare keyless ssl to keep this (horrible) ca private key... private?
- mrb 10y agoThis would keep the key private, but would not contain the potential for abuse. The appliance owner could still invoke whatever mechanism is used to generate certs for arbitrary hostnames.