misk@sopuli.xyz to Technology@lemmy.worldEnglish · 1 month agoLet's Encrypt Announces New-Certificate-Every-6-Days Offeringletsencrypt.orgexternal-linkmessage-square108fedilinkarrow-up1370arrow-down18file-text
arrow-up1362arrow-down1external-linkLet's Encrypt Announces New-Certificate-Every-6-Days Offeringletsencrypt.orgmisk@sopuli.xyz to Technology@lemmy.worldEnglish · 1 month agomessage-square108fedilinkfile-text
via https://it.slashdot.org/story/24/12/15/0059216/lets-encrypt-announces-new-certificate-every-6-days-offering
minus-squareoldfart@lemm.eelinkfedilinkEnglisharrow-up3·1 month agoYeah, now imagine pinning certs that change weekly. My first thought is that old school secure software (like claws-mail) treats a cert change as a minor security incident, asking you to confirm every time. Completely different school of thought.
minus-squarejagged_circle@feddit.nllinkfedilinkEnglisharrow-up1·edit-21 month agoYou can pin to your own CA. Then it doesn’t matter if you want to update your certs frequently.
Yeah, now imagine pinning certs that change weekly.
My first thought is that old school secure software (like claws-mail) treats a cert change as a minor security incident, asking you to confirm every time. Completely different school of thought.
You can pin to your own CA. Then it doesn’t matter if you want to update your certs frequently.
Right