4 ms·
What of Certificate Signing Requests? The whole purpose was that you wouldn’t send private keys around. (I was only slightly involved with a couple of TLS cert
by chrismorgan 2y ago
What of Certificate Signing Requests? The whole purpose was that you wouldn’t send private keys around.
(I was only slightly involved with a couple of TLS certificates before then, and certainly they enforced the CSR approach, but maybe such terrible practice was more common in the real world that I knew.)
- selectnull 2y agoMy memory of the whole process is kinda fuzzy, you're probably right about CSRs. Hopefully the private keys were not sent around via unencrypted email. But the point still stands: the whole process was a nightmare, no automation, error prone, renewal easily forgetable... The large companies could have had a staff to manage all that. I was just a solo developer managing my own projects, and it was a hassle.