3 ms·
Ask HN: etc./letsencrypt/ had past five years of data
Had to look by chance at that folder and found out the full history of certificates and keys were sitting there. I don't know what to think, isn't this like having a record of all your previous passwords?, but worse.
- noodlesUK 5y agoIt’s not nearly as bad as you think. If you’re a Let’s Encrypt user, there’s a high likelihood that your servers (and your clients) were negotiating PFS cipher suites. If they were, a compromise of the private key wouldn’t mean that you could break past intercepted communications. https://en.m.wikipedia.org/wiki/Forward_secrecy https://en.m.wikipedia.org/wiki/Forward_secrecy
- unlog 5y agooh, Thank you!