News for hackers. Stuff that matters.
Re:Chromium and Mozilla to enforce 1 year validity for TLS c... by AdamJacobMuller on Sunday June 28, 2020 @01:02PM (#23670195)
I'm not a huge fan of it, but, it seems like the way things are going is to simply run a service which is basically a large proxy.

Your device connects out with some kind of persistent connection to their central service then requests to your device go to their server, which does AAA and routes to your local device. Fixes the SSL issue, avoids any NAT headaches, enables fully remote access and most importantly for PMs it makes the device useless without your server-side components. If there is any local accessibility at all, it can be neutered or reduced.

I don't entirely hate this model, its not my favorite, but, its the way things are going.

Re:Chromium and Mozilla to enforce 1 year validity for TLS c... by heavenlyblue on Sunday June 28, 2020 @01:28PM (#23670403)
I would be happy if my router supported letsencrypt.

Why would I even bother copying and distributing self-signed certificates if I can just properly get a certificate for my own personal router?

It’s idiotic that people still trust pure HTTP and have no option of switching.

Re:Chromium and Mozilla to enforce 1 year validity for TLS c... by robocat on Monday June 29, 2020 @03:09AM (#23675161)
If your router needs configuring before it can access the Internet, then it can’t use certificates that require the internet to generate or validate.

Or if you change ISP and need to change your router internet connection configuration, your router cannot be accessed.

Re:Chromium and Mozilla to enforce 1 year validity for TLS c... by heavenlyblue on Monday June 29, 2020 @05:29PM (#23683348)
When was the last time you needed to configure your router to access the internet?

I understand if that router is something industrial, but then you can probably figure out how to do that over SSH anyway (which is secure).

Re:Chromium and Mozilla to enforce 1 year validity for TLS c... by paledot on Sunday June 28, 2020 @01:10PM (#23670272)
I think this is the only practical answer, unfortunately. Everything else might possibly be made to work for a personal project, but definitely isn't an option at scale.
Re:Chromium and Mozilla to enforce 1 year validity for TLS c... by AdamJacobMuller on Sunday June 28, 2020 @03:54PM (#23671555)
The way plex does it works great at scale.

It requires people to care more about "self hosted" than "PM says this will centralize user access and allow us to collect data and better monetize"

I'm not knocking either model. They both work (technically) but you need to understand your market and what works better for them.