Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network
helix@feddit.org 3 days agoWhat benefit does that give you for media viewing?
What exactly about X.509 is trash for that use case?
Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network
helix@feddit.org 3 days agoWhat benefit does that give you for media viewing?
What exactly about X.509 is trash for that use case?
CAs and their subordinate certs have a long history of loosing control of their private keys to attackers.
And also many State-sponsored cyber mercenaries have been given certs in the root stores.
Onion Services fix this by using a single pinned cert.