News for hackers. Stuff that matters.

A comment on You Shouldn't Use Public CAs for Internal Infrastructures.

Re:You Shouldn't Use Public CAs for Internal Infrastructures by warriormonk5 on Sunday December 18, 2022 @09:13AM (#34037797)
I think private CAs are a mistake if only because of all the time wasted on certificate errors from improperly configured platforms. Don't forget that some languages don't respect system stores.
[ Parent | on HN ]
Re:You Shouldn't Use Public CAs for Internal Infrastructures by xorcist on Sunday December 18, 2022 @09:41AM (#34038098)
If those platforms hasn't been configured with the most basic things such as the company CA, there's going to be lots of other headaches too, including security.

How do you enforce authentication standards in that kind of environment, let along an internal user directory? No software can enter an environment completely unconfigured and be expected to work.

[ Parent | on HN ]