Comment on Decreasing Certificate Lifetimes to 45 Days
stratself@lemdro.id 5 days agoTechnically something like DANE can allow you to present DNSSEC-backed self-signed certs and even allow multi-domain matching that removes the need for SNI and Encrypted Client Hello… but until the browsers say it is supported, it’s not
RheumatoidArthritis@mander.xyz 4 days ago
At some point there was a browser extension to support DANE (and Perspectives and similar approaches against centralization) but since then, browser vendors fixed that security flaw.