#certificates — Public Fediverse posts

#Development #Findings
Top 1 Million Analysis 2026: Cryptography · “The TLS and certificate ecosystem feels like it’s finally in good shape.” https://ilo.im/16e7p9

_____
#Cryptography #CAs #Certificates #TLS #ECDSA #RSA #DevOps #WebDev #Frontend #Backend

TLS certificates for internal services done right

https://tuxnet.dev/posts/tls-for-internal-services/

Comments: https://news.ycombinator.com/item?id=48846995

#HackerNews #TLS #certificates #internal #services #security #bestpractices #encryption

Hmm, if the site protecting VISA "3d auth" (MFA for online card transactions) can't be bothered to get an EV certificate, what's the point of them at all...?

issuer=C = CA, O = Entrust Limited, CN = Entrust OV TLS Issuing RSA CA 2
subject=C = US, ST = Massachusetts, O = Outseer LLC, CN = www.rsa3dsauth.co.uk
SHA1 Fingerprint=11:03:1E:D7:49:67:61:46:A4:B3:85:2A:D6:46:FE:76:1F:21:D5:93

#certificates #snakeoil #tls

Secure your SSH with Tailscale: short-lived certificates (30-min TTL) and audit logging to a remote syslog server. Run `tailscale up --ssh` on Ubuntu 22.04, Debian 12, or Fedora 38, configure cert TTL in admin console, and update sshd_config for full control. #tailscale #ssh #certificates

https://www.valtersit.com/vault/tailscale-ssh-with-shortlived-certificates-and-audit-logging-b19b2e/

Is anyone aware of an alternative to crt.sh ? I really like the website, and it's simple visualization. No bloat around it, just the pure purpose of providing insights from CT logs.

However, the website quite often returns server errors, and others. More often than it did in the past, a few years ago. My hope is, to find a similarly informative tool that is however a bit more reliable.

I dislike it if I have to put down a note to re-check a domain's certificate history and to remember just because the service was down by the time I was interested in the information.

#certificates #tls #ssl #certificatetransparency #logs #bigdata #https

The domain transfer from Cloudflare to OVHcloud finally went through and I requested new certificates and everything went smooth. All services from my home server are available again.

#selfhosting #homeserver #cloudflare #ovhcloud #domains #transfer #certificates #success

Let’s Encrypt Certificate Rules Now Include U.S. Sanctions Warranties

Let’s Encrypt now requires certificate subscribers to confirm they are not covered by comprehensive U.S. sanctions or restricted-party rules.

Archive: ia: https://s.faithcoll...

#certificates #lets-encrypt #linux-&-open-source-news #software
https://linuxiac.com/lets-encrypt-certificate-rules-now-include-u-s-sanctions-warranties/

https://tweakers.net/nieuws/249034/tls-certificaten-van-overheidsdomeinen-lijken-verlopen-door-fout-certsign.html

Certsign - the Dutch government goto-CA fucked up and accidentally kinda revoked an intermediate CA certificate.

Basically everything government related is affected.

(Translation in threat)

Added books big tracker link: https://bugzilla.mozilla.org/show_bug.cgi?id=2046230

#cyber #cybersecuity #InfoSec #CA #certificates

#LetsEncrypt #Certificates #Banned #Sanctioned #territory

And so it begin's....

"You are not a person or entity that is: (a) located in, organized under the laws of, or ordinarily resident in any country or territory that is the target of comprehensive U.S. sanctions; (b) a prohibited or restricted party under U.S. or other applicable sanctions and export control laws and regulations; or (c)...."

#LetsEncrypt #Certificates #Banned #Sanctioned #territory

https://letsencrypt.org/documents/LE-SA-v1.7-June-04-2026-diff.pdf

OK, normally I have my shit wired together, but this bastard is getting to me.

The requirement is for 'phishing-resistant' second factor. That rules out all of the six-digit code apps - it is too easy apparently to get someone to read out their codes to an attacker.

Again, IDK, but apparently 'phishing-resistant' is the next Big Thing. My personal feeling? We are chasing our shadows. Unless I am the last alive Iranian nuclear bloke, my login is as secure as I can be bothered to make it, and I am bound to be disappointed by a weakness at some point in the near or far future. Phishing isn't on the agenda.

Life.

I carry a seemingly-fine cryptographic store about with me most days and ludicrously call it my 'phone'. It can sign stuff, wrangle certificates, store passwords, read faces and fingerprints and QRcodes and NFC tags. Heaps of useful 'security' stuff. I wouldn't call the software environment _secure_ at all, but ... IDK, people seem happy enough with it. Anything for an easy life. Row with the flow.

So I search for:
"google passkey login with ssh"
My god, whatalottasloppa comes back. A gattling gun of half-arsery, cant and junk advice.
Then "MS hello for business login ssh". Christ almighty. Much worse. Worse again.
Then "Apple ID login to ssh". At least that seems to be a simple: "no". A relief really.

Someone in the know please: can I set up my sshd to use my phone-based passkey as a; primary, secondary or even the complete, login?

#TOTP #HOTP #passkey #sshd #key #certificates #PSK #login #ssh #linux #pam #openssh

Let's Encrypt, pls, don't let us down, I can't go back to painful reissuance of certificates through digital equivalent of 18th century english bank.

Also, I don't want to get a heart attack due to me working in infosec and suddenly remembering worst case scenarios, including what Vernor Vinge described in Rainbow's End.

#infosec #certificates

Lets Encrypt Stopping Issuance for Potential Incident

https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/69fe2d6698ca07050eb4b1b3

#HackerNews #LetsEncrypt #Incident #Cybersecurity #SSL #Certificates #WebSecurity

If your looking for lower cost code signing certificate for an open source project then Certium has options:

https://www.certum.eu/en/

€69 for the first year, which apparently includes a USB device to house the certificate hardware, renewals is a lot less.

Seems like a good option, although I've not tried this personally 🙂🤷‍♂️

#AppDevelopment #OpenSource #Certificates #DigitalCertificates #CodeSigning

I'm now removing #HestiaCP from the #server 🤬

#letsencrypt #certificates for the mail domain keep failing to renew automatically. Getting a new certificate for the affected domains is always a nightmare.

I only notice the error when my email programs report an expired certificate. I've been desperately trying to renew two expired certificates for the past hour, but the requests keep getting rejected.

Firstly, this is beyond my capabilities, and secondly, I had better things to do today. I'll try #ISPconfig again.

PKI in a Nutshell
A blog by Ronald

This blog briefly describes theoretically how Public Key Infrastructure (PKI) works. It also introduces the key concepts used in PKI. This is done by describing encryption, decryption, hashing, signing, and authentication using mathematical notations.

#dev #softwaredevelopment #Security #PKI #PublicKeyInfrastructure #Certificates #PublicKey #PrivateKey #Keystore #Truststore

https://jdriven.com/blog/2026/04/PKI-in-a-Nutshell/

Now I get notified when my certificates are expiring before everything breaks.

#monitoring #observability #certificates #grafana #selfhosting #sysadmin

Oh joy, another groundbreaking revelation: #SSH #certificates are like the ultimate VIP pass for servers, sparing us the nail-biting suspense of wondering if we're chatting with the right machine 🤯. Because surely, the average user isn't just mindlessly hitting 'yes' and hoping for the best 🤦‍♂️. Who knew server security could be this exhilarating? 🎉
https://jpmens.net/2026/04/03/ssh-certificates-the-better-ssh-experience/ #ServerSecurity #VIPPass #Cybersecurity #TechHumor #HackerNews #ngated

SSH certificates: the better SSH experience

https://jpmens.net/2026/04/03/ssh-certificates-the-better-ssh-experience/

#HackerNews #SSH #certificates #SSH #security #devops #technology

Oh, look! The US #military is treating #cybersecurity like it's an optional accessory! 🎖️🔐 Why bother with updated #TLS #certificates when you can just let everyone enjoy a nostalgic trip back to the early 2000s? 🚀💾 "Welcome to #LWC #Communities," where #expired security is the new norm. 🤦‍♂️
https://www.cyber.mil/stigs/downloads #outdated #HackerNews #ngated