BorgDrone
@BorgDrone@feddit.nl
This is a remote user, information on this page may be incomplete. View original ↗
- Comment on Anyone using 6-day certs yet? 2 weeks ago:
Several reasons
- If a private key leaks, a shorter certificate lifespan limits the fallout
- Faster upgrades to new cryptographic standards. If some of the crypto methods used get broken, short lived certificates means they get replaced with newer methods faster
- Short lived certificates force sysadmins to automate the renewal process. This prevents expired certificates due to forgetting the manual renewal.
- Certificate lifetime and domain ownership mismatch. You could buy a 2 year certificate for somedomain.com and then sell the domain or just let it expire and have it picked up by someone else. You then have a valid certificate for a domain you no longer ow and you could MitM traffic for the new owner’s website.
- Comment on My Homelab Got Hacked - A Postmortem – Phunky Cafe 1 month ago:
UPNP is a security nightmare, better to never enable it at all or if you must only for those networks where you need it.
- Comment on Solar Has Crossed a Critical Economic Tipping Point | Solar now requires no more upfront capital than coal or gas to produce the same annual electricity 1 month ago:
At night I run off my battery. I can’t go completely off-grid, the days are simply too short in winter, but for like 70% of the year I get free electricity.