Let's Encrypt and Nginx – State of the art secure web deployment

Re:Let's Encrypt and Nginx – State of the art secure web dep... by llambiel on Thursday March 31, 2016 @05:52PM (#11400853)

I agree with your concern. As a temporary "workaround" I've updated the article with a SHA256 checksum of the key. I'll chase the Nginx team for serving this key over https

[ Parent | on HN ]

Re:Let's Encrypt and Nginx – State of the art secure web dep... by click170 on Thursday March 31, 2016 @08:56PM (#11401811)

We should really be verifying the fingerprint of the key itself, even if it is served over HTTPS.

[ Parent | on HN ]

Re:Let's Encrypt and Nginx – State of the art secure web dep... by schoen on Thursday March 31, 2016 @06:04PM (#11400939)

Thanks for the update!

[ Parent | on HN ]