[spam][crazy] Adding Cert Pinning to E-X
Undiscussed Horrific Abuse, One Victim of Many
gmkarl at gmail.com
Sun Feb 20 14:38:05 PST 2022
On 2/20/22, grarpamp <grarpamp at gmail.com> wrote:
>> how pubkey pinning differs from that much
>
> Try pinning google's, or any letsencrypt, end service full DER certs,
> it's a maintenance headache because they're constantly changing.
> Pinning google's intermediate certs (pubkey or full DER), or the LE
> end service pubkeys, can reduce maintenance, with same security.
I had thought cert pinning was a normal further step after use of CA
certs. How long's google been rotating their certs? Do you have a link
regarding this?
More information about the cypherpunks
mailing list