3 ms·
If only there were a way to signify trust for a self-signed certificate or CA under a particular domain name, directly using control of the domain to anchor thi
by eqvinox 6y ago
If only there were a way to signify trust for a self-signed certificate or CA under a particular domain name, directly using control of the domain to anchor this...
... oh wait. https://tools.ietf.org/html/rfc6698 https://tools.ietf.org/html/rfc6698
- Majromax 6y agoThat’s exactly the problem – home routers don’t have a public domain, especially before their initial setup.
- easton 6y agoI wonder if the router manufacturer could just have the router connect to a Dynamic DNS provider, register the router’s current IPv6 address (so we don’t have to worry about NAT from a evil modem), and get a Let’s Encrypt cert over ACME. Synology does something like this if you open the right ports for your NAS. Every IoT device doing this might be annoying for Let’s Encrypt, but routers I think are worth it considering they stand guard for the rest of the home network.
- est31 6y agoSometimes you need to enter access credentials in order to enable internet access for your router. How will you do that (outside of telnet/ssh) if it needs internet so that you can connect to it?