3 ms·
Could you run an internal CA server instead of self signing? At least then you reduce your attack surface if you’re compromised internally.
by cheschire 7y ago
Could you run an internal CA server instead of self signing? At least then you reduce your attack surface if you’re compromised internally.
- BrandoElFollito 7y agoYes, this is what is being done today. My point was that HTTPS is (much) more complicated than bare HTTP and this is probably one of the reasons it is not taking over the web in a storm (though progress is undoubtedly there)