4 ms·
Of all the complexity and unknown that are embedded in projects with decades of lifespan, for this one in particular the solution is quite straightforward: roll
by LoSboccacc 9y ago
Of all the complexity and unknown that are embedded in projects with decades of lifespan, for this one in particular the solution is quite straightforward: roll your own certificate authority and relative certificate distribution and deployment scripts.
- merb 9y agoThis only works when SHA256 certs will be supported for 30 years (which I doubt it won't sustain the next 30 years..) I know plenty of devices which can't be used correctly any more since SHA1 + SSLv2/SSLv3 was deprecated and they generated a CA+Cert with 512/1024 Bits.
- LoSboccacc 9y agounmaintained unsupervised support is clearly not an issue, which operating system could they chose with that kind of guarantee?