Conversation

Notices

1. lamp (lamp@kitty.haus)'s status on Thursday, 16-May-2024 14:48:57 JST lamp
   Why does #caddy renew local cert every day? Causes bit of hicup with cached cert...
   • francislavoie (francislavoie@phpc.social)'s status on Thursday, 16-May-2024 14:48:56 JST francislavoie

     in reply to

     @lamp certs with shorter lifetimes are more secure because it reduces the impact of the private key is leaked/exposed/stolen by rotating it. With a cert with a long lifetime, the attacker can impersonate your site for as long as the cert remains valid. That's why let's encrypt certs are only 90 days instead of what was previously the industry standard of 5 years, it greatly lessens the impact of an exposure/leak.

     ミク初音 repeated this.
   • lamp (lamp@kitty.haus)'s status on Thursday, 16-May-2024 14:49:01 JST lamp

     in reply to

     • francislavoie
     @francislavoie seems kinda moot if it's stored same place as the ca root cert
     ミク初音 likes this.