2 ms·
Maybe get a proper certificate designed for such things instead of using what amounts to a corporate-funded public service.
by withinboredom 3y ago
Maybe get a proper certificate designed for such things instead of using what amounts to a corporate-funded public service.
- djbusby 3y agoWhat is improper about them? Works for 100% of my use case, well known, trusted, compatible.
- aaomidi 3y agoLet's Encrypt, and WebPKI in general is meant for public consumption of certificates. I think what this means is, if you're needing some stricter limitations on these, use private PKI within your own devices. E.g. for Machine to Machine comms.
- withinboredom 3y agoWhat I mean is, if you want to pin certificates, purchase a certificate that expires in years, not months.
- vbezhenar 3y agoYou pin public key, not certificate. You can keep your private key for whatever period you want and issue multiple certificates with the same public key.
- tptacek 3y agoIndeed, many of the vendors who will sell you proper certificates will also sell you anti-tiger rocks, which you should also consider procuring.
- duskwuff 3y agoSome of these anti-tiger rocks even come with an anti-tiger warranty. If you can confirm that you were attacked by a tiger and the rock failed to protect you, you can make a claim for the price of a new rock.