• @[email protected]
    link
    fedilink
    English
    271 month ago

    What is the use case or benefit for the server admin?

    as a server admin I wouldn’t want to keep renewing my cert.

    can anyone help to explain?

    • @[email protected]
      link
      fedilink
      English
      391 month ago

      Lets Encrypt certs tend to be renewed by a cronjob, anyway. The advantage is that if someone gets your cert without your knowledge, they have, at most, six days to make use of it.

      • Phoenixz
        link
        fedilink
        English
        41 month ago

        That makes little sense. If they can get my certificate then I have different problems that ,a 6 day turnaround isn’t going to solve

          • Phoenixz
            link
            fedilink
            English
            41 month ago

            … Seriously?

            If someone got a hold of your certificate that is the security equivalent of the entire company being on fire. If they got my certs they likely will have my credit cards, my birth certificate, and my youngest daughter.

            Thank God though that I can renew my certificates every 6 days, that will definitely help sole the problem.

            • @[email protected]
              link
              fedilink
              English
              31 month ago

              OK. Whatever hypothetical we want to think about here, we still want our cert to be renewed.

              • Phoenixz
                link
                fedilink
                English
                229 days ago

                Yeah and that is something everyone already is doing anyway, I never said anything about not doing that.

                I said that lowering the amount of days to 6 won’t do anything to increase security. Then why not lowering it to 1 day? That ought to be super secure now! Why not 1 hour or 1 minute? Super duper secure?

                What is the actual added security benefit here? Because so far all I’ve seen is security theatre, something unexpected from let’sencrypt

            • @Hawk
              link
              English
              11 month ago

              Yeah but it’s just an extra layer. Why not, it’s automated and almost no-cost.

            • @[email protected]
              link
              fedilink
              English
              11 month ago

              they likely will have my credit cards, my birth certificate, and my youngest daughter.

              that’s… not how SSL works.

              • @Hawk
                link
                English
                31 month ago

                I think the implication is the infiltrator would have a lot of access already.

              • Phoenixz
                link
                fedilink
                English
                129 days ago

                Indeed not, it’s how real life works, as there is more to lige than just SSL. If someone has access to your SSL certificates you have a ginormous set of issues, your easily replaceable SSL certificates being one of the lowest priority. I don’t see how a 6 day limit on that is going to do anything at all to help you with safety