News for hackers. Stuff that matters.

A comment on Certificates for localhost. Parent comment

Re:Certificates for localhost by ajnin on Thursday June 21, 2018 @08:08AM (#17364339)
Which "compromises" the key, according to current Certificate Authorities policies. Once again the problem boils down to CAs being the sole "anchors of trust" in the current certificate system.
[ Parent | on HN ]
Re:Certificates for localhost by progval on Friday June 22, 2018 @08:10PM (#17378588)
Then they could have their server tunnel ACME challenges to the device, so the private key never leaves the device, but can still be signed.
[ Parent | on HN ]