News for hackers. Stuff that matters.
Re:LetsEncrypt Certificate Issuance Halted by tialaramex on Thursday November 25, 2021 @06:42AM (#29340491)
However, your pinning strategy, at whatever level, should have planned fallbacks. That can mean if you pin keys you have a second pinned key that exists only on a HSM in somebody's safe ready for emergencies, or in this case it means picking an extra CA and pinning them too, ready for such scenarios. If your pinning doesn't account for such things you sacrificed availability for security which is likely a bad choice.

There are no comments on this comment yet.