Using letsencrypt with HKPK

Posted by hobarrera on Sunday February 07, 2016 @07:56PM
from the hugo.barrera.io dept.

( 4 comments | 8 points | on HN )

Re:Using letsencrypt with HKPK by technion on Sunday February 07, 2016 @09:14PM (#11056050)

There's a minor typo in the "copy and paste" segment, wherein the second hash is not surrounded by quotes. Regardless, this is great advice.

I trust Lets Encrypt. I don't trust many of the dozens of terrible CAs out there. Key pinning is one great step at mitigating that risk.

[ Parent | on HN ]

Re:Using letsencrypt with HKPK by hobarrera on Tuesday February 09, 2016 @03:45AM (#11063989)

Thanks for the feedback, and I'm glad it's of use.

I'll get that typo fixed, though FWIW, it works without the quotes, since it's what validated on my servers. :)

[ Parent | on HN ]

Re:Using letsencrypt with HKPK by technion on Tuesday February 16, 2016 @08:42PM (#11114551)

Thanks for the update!

For the reference, I noted on my system, without the quotes, the SSLLabs test gave me a big error claiming the keys were invalid.

[ Parent | on HN ]

Re:Using letsencrypt with HKPK by SomeGermanGuy on Monday February 08, 2016 @05:55AM (#11057425)

This looks great, I will try it when I switch to letsencrypt.

[ Parent | on HN ]