> On Apr 10, 2019, at 6:57 AM, Noah <[email protected]> wrote:
> 
> 
> 
> On Wed, Apr 10, 2019 at 4:04 PM Owen DeLong <[email protected] 
> <mailto:[email protected]>> wrote:
> If you automate the process, you have to store the private key in a manner in 
> which it can be accessed automatically.
> 
> The only process that needs automation is the timing of when certificates 
> expire next [1] so as to best inform the humans and invoke pro-activeness 
> which includes offline testing to avoid any human errors that may result in 
> live production. 
> 
> Noah
> [1] they indicated the monitoring system picked the issue up but perhaps more 
> pro-activeness and offline testing to avoid human errors in the future would 
> come in handy.

AIUI, the timing is every 30 days and the humans were notified 15 days ahead 
and failed to act.

Further, AIUI, they’ve taken steps to make sure that the humans don’t fail to 
act on such notification in the future.

I ask that AfriNIC staff provide clarification if either of my above 
understandings of their report is inaccurate.

Owen

_______________________________________________
Community-Discuss mailing list
[email protected]
https://lists.afrinic.net/mailman/listinfo/community-discuss

Reply via email to