Comment on ICANN approves use of .internal domain for your network
BestBouclettes@jlai.lu 1 month agoThat’s the problem, if anyone somehow gets your root CA key, your encryption is pretty much gone and they can sign whatever they want with your CA.
It’s a lot of work to make sure it’s safe in a home setup.
prime_number_314159@lemmy.world 1 month ago
You can just issue new certificates one per year, and otherwise keep your personal root CA encrypted. If someone is into your system to the point they can get the key as you use it, there are bigger things to worry about than them impersonating your own services to you.
Petter1@lemm.ee 1 month ago
And additionally, you can sign intermediate Certificates reducing the risk even more, since you can revoke and re-issue new ones any time.