[spam][crazy] Adding Cert Pinning to E-X

Undiscussed Horrific Abuse, One Victim of Many gmkarl at gmail.com
Sun Feb 20 14:38:05 PST 2022


On 2/20/22, grarpamp <grarpamp at gmail.com> wrote:
>> how pubkey pinning differs from that much
>
> Try pinning google's, or any letsencrypt, end service full DER certs,
> it's a maintenance headache because they're constantly changing.
> Pinning google's intermediate certs (pubkey or full DER), or the LE
> end service pubkeys, can reduce maintenance, with same security.

I had thought cert pinning was a normal further step after use of CA
certs. How long's google been rotating their certs? Do you have a link
regarding this?


More information about the cypherpunks mailing list