Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Rich Freeman
On Tue, Jun 1, 2021 at 8:16 AM Michael Orlitzky wrote: > > On Tue, 2021-06-01 at 13:02 +0100, Peter Humphrey wrote: > > > > So what would you recommend for someone in the case Joost cites? I'm in that > > position, being a home user of a small network but no registered Internet > > name. > > > >

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread karl
Karl: > Michael Orilitzky: Sorry, I mistyped, it should be: Peter Humphrey > ... > > * The LetsEncrypt certificates expire after three months, as opposed  > > to 10+ years for a self-signed certificate. You're supposed to  > > automate this... by running a script as root that takes input

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread karl
Michael Orilitzky: ... > * The LetsEncrypt certificates expire after three months, as opposed  > to 10+ years for a self-signed certificate. You're supposed to  > automate this... by running a script as root that takes input from  > the web? I'd rather not do that. You can run most part

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread karl
Joost: > On Tuesday, June 1, 2021 12:44:47 PM CEST k...@aspodata.se wrote: ... [ about letsencrypt ] ... > It's not that easy to do it with internal-only systems as Let's Encrypt > requires the hostname to be known externally. > And there are plenty of devices you do not want the whole internet

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Peter Humphrey
On Tuesday, 1 June 2021 13:16:59 BST Michael Orlitzky wrote: > On Tue, 2021-06-01 at 13:02 +0100, Peter Humphrey wrote: > > So what would you recommend for someone in the case Joost cites? I'm in > > that position, being a home user of a small network but no registered > > Internet name. > > A

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Michael Orlitzky
On Tue, 2021-06-01 at 13:02 +0100, Peter Humphrey wrote: > > So what would you recommend for someone in the case Joost cites? I'm in that > position, being a home user of a small network but no registered Internet > name. > A self-signed certificate combined with a browser extension that lets

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Peter Humphrey
On Tuesday, 1 June 2021 12:40:28 BST Michael Orlitzky wrote: > On Tue, 2021-06-01 at 13:17 +0200, J. Roeleveld wrote: > > It's not that easy to do it with internal-only systems as Let's Encrypt > > requires the hostname to be known externally. > > And there are plenty of devices you do not want

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread Michael Orlitzky
On Tue, 2021-06-01 at 13:17 +0200, J. Roeleveld wrote: > > It's not that easy to do it with internal-only systems as Let's Encrypt > requires the hostname to be known externally. > And there are plenty of devices you do not want the whole internet to know > about. > And in this situation

Re: Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread J. Roeleveld
On Tuesday, June 1, 2021 12:44:47 PM CEST k...@aspodata.se wrote: > BillK: > ... > > > And another "wondering" - all the warnings about trusting self signed > > certs seem a bit self serving. Yes, they are trying to certify who you > > are, but at the expense of probably allowing access to your >

Letsencrypt (was Re: [gentoo-user] app-misc/ca-certificates)

2021-06-01 Thread karl
BillK: ... > And another "wondering" - all the warnings about trusting self signed > certs seem a bit self serving. Yes, they are trying to certify who you > are, but at the expense of probably allowing access to your > communications by "authorised parties" (such as commercial entities >