3 ms·
Just spinning up a CA is a couple of commands. Running one sanely (to include security of the private keys, availability and auditability of the signing machine
by Karunamon 6y ago
Just spinning up a CA is a couple of commands. Running one sanely (to include security of the private keys, availability and auditability of the signing machine, keeping backups, publishing a CRL, setting up ACME if you want any kind of automation) is significantly more involved.
- Spivak 6y agoBut this is silly. If this isn’t completely trivial to add to your app then something has gone horribly wrong. * Every machine in your infra already has backups, right? Nothing about your signing boxes are special in this regard. * All your services are already HA, right? The API servers that now have to run some glorified OpenSSL commands aren’t any different than your normal API endpoints. * You already have to protect secrets on your machines. DB passwords, API keys. What’s one more? * You don’t have to implement ACME. These are your devices talking to your devices.
- rad_gruchalski 6y agoNothing different than any long lived component in any infrastructure. There is no reason to look for reasons not to use a CA.