Re:RFC 8548: Cryptographic Protection of TCP Streams (Tcpcrypt)
by nullc on Tuesday May 28, 2019 @12:10AM
(#20027154)
> Given that letsencrypt exists, I don't see why you wouldn't have a cert.
That makes an enormous number of assumptions-- that you have a domain name, that you accept inbound connections, and that "gee some server connected to my name and got me once" is a remotely acceptable criteria for identity in your application.
That makes an enormous number of assumptions-- that you have a domain name, that you accept inbound connections, and that "gee some server connected to my name and got me once" is a remotely acceptable criteria for identity in your application.