Updated recommendations regarding TOFU & TLS

[Bradley D. Thornton]

On 3/4/2021 8:43 AM, Drew DeVault wrote:
> Note: I'm not subscribed to this list, please use "reply-all" to make
> sure I get Cc'd on your reply.

Um... no offense intended, but if you're not on the list, then why are
you posting to the list?

Honest question.


> 
> To re-state one of my previous recommendations, which I still figure is
> a good idea: server software should handle certificate maintenance for
> the user. Making the sysadmin generate certificates is cumbersome and
> error prone, 


No it's not. It happens every eighty something-ish days automatically.

For the forseeable future, Vger will continue to use LetsEncrypt. Easy
Peasy!

I hope that helps :)

Kindest regards,


-- 
Bradley D. Thornton
Manager Network Services
http://NorthTech.US
TEL: +1.310.421.8268