News for hackers. Stuff that matters.

A comment on Launching in 2015: A Certificate Authority to Encrypt the Entire Web. Parent comment

Re:Launching in 2015: A Certificate Authority to Encrypt the... by jerf on Tuesday November 18, 2014 @12:21PM (#8624957)
But note that only works if the manufacturer can choose the name without an issue from the customer. For things like network appliances in larger companies that aren't going to want [generic number]manufacturer.com but want [my name].corp.[my company].com, you're stuck.
[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by icebraining on Tuesday November 18, 2014 @12:32PM (#8625028)
Allow the cert to be configurable, then the company can use its internal CA to give certs to all its appliances.
[ Parent | on HN ]
Re:Launching in 2015: A Certificate Authority to Encrypt the... by jerf on Tuesday November 18, 2014 @12:38PM (#8625068)
Yes, that's the status quo, and has been for a while. The point is that's currently the best you can do. For boxes without external exposure, this work won't change anything, but a standardized protocol for dealing with boxes with external exposure would still help some use cases.
[ Parent | on HN ]