2 ms·
If you update the certificates manually, then the private key would just reside on your local machine and not need to be exposed on the server.
by m12k 9y ago
If you update the certificates manually, then the private key would just reside on your local machine and not need to be exposed on the server.
- tskaiser 9y agoIndeed, but I cannot see how this addresses my question?
- codehenge 9y agobecause your private key never needs to be compromised, even if your server is breached, because it never needs to be on the server. That said, I agree that if the PK is only used for this single server, you have bigger problems than its loss if your server is breached.
- stephenr 9y agoIf the key isn't on the server how does software use the certificate?
- iancarroll 9y agoIf the server requesting the certificate is going to use the certificate, then the server ends up with the private key either way.
- deleted 9y ago[deleted]