4 ms·
If you're running private PKI, sure, you'll do it. What value is it when you are behind a proxy that can change IP? I mean, I'm going on the assumption that th
by lelanthran 8mo ago
If you're running private PKI, sure, you'll do it.
What value is it when you are behind a proxy that can change IP? I mean, I'm going on the assumption that the proxy is not under his control, nor does it do the tls termination.
- bob1029 8mo agoIf your public interface address can change, it does dramatically reduce the value of a purely IP-addressed host. But I don't think it eliminates it entirely. With a dynamic IP you can still detect a change, reissue a cert for the new IP and proceed automatically. There are self-hosting and machine-to-machine scenarios where this amount of autonomy could be welcome.