News for hackers. Stuff that matters.

A comment on Running one’s own root Certificate Authority in 2023. Parent comment

Re:Running one’s own root Certificate Authority in 2023 by infogulch on Sunday September 17, 2023 @11:56AM (#37546437)
That post is almost 7 years old. My second link is to the test suite mentioned at the end, which if you look at it you'll see that name constraints are now universally supported. I don't think this take is valid anymore.
[ Parent | on HN ]
Re:Running one’s own root Certificate Authority in 2023 by yonran on Sunday September 17, 2023 @12:49PM (#37547028)
And for old devices, letsencrypt should force nameConstraints to be a critical extension so that old devices will just fail to accept it so that it won't be used “rogue”ly.
[ Parent | on HN ]