4 ms·
Maybe you (or anyone) could shed light on something for me? I'm sure leaf certificate pinning is very common among your customers. Assuming that pinning is a m
by RulerOf 2y ago
Maybe you (or anyone) could shed light on something for me?
I'm sure leaf certificate pinning is very common among your customers. Assuming that pinning is a manual process where customers decide to implicitly trust a specific cert, what's the point of using a third party CA for those customers all?
Does anybody self-sign or use a private CA on specific endpoints with longer certificate validity, and let the pinning customers use those?
- Plasmoid 2y agoWe have explicitly told customers not to pin our certificates and if they suffer downtime due to pinning it will not be considered a breach of our SLA. We have one customer who has demonstrated enough competence with certificates that we create a private ca endpoint and let them use that. The private root lasts around 5 years, and they pin to that.