4 ms·
This is actually a great suggestion and ACME providers should provide it as an opt-in feature via CAA record. Not even the provider having access to system memo
by silverwind 3y ago
This is actually a great suggestion and ACME providers should provide it as an opt-in feature via CAA record. Not even the provider having access to system memory could issue a mitm cert without you noticing.
- Jenda_ 3y agoThe provider having access to system memory can copy the private key and use your original key+cert for MITM, unless you are using some fancy HSM.