mastodon.online is one of the many independent Mastodon servers you can use to participate in the fediverse.
A newer server operated by the Mastodon gGmbH non-profit

Server stats:

11K
active users

#certificate

5 posts4 participants0 posts today

Let's Encrypt 把 CRL 位置加到憑證裡面了

在「Adding CRL URLs to certificates」這邊看到的公告,把 CRL 位置加到憑證裡面了: On March 12, 2025, Let’s Encrypt will start including CRL (Certificate Revocation List) URLs in certificates we issue, in addition to the OCSP URLs we already include. This is part of our previously announced changes to deprecate support for OCSP. CRLs and OCSP are two di…

blog.gslin.org/archives/2025/0

Gea-Suan Lin's BLOG · Let's Encrypt 把 CRL 位置加到憑證裡面了在「Adding CRL URLs to certificates」這邊看到的公告,把 CRL 位置加到憑證裡面了: On March 12, 2025, Let’s Encrypt will start including CRL (Certificate Revocation List) URLs in certificates we issue, in addition to the OCSP URLs we already include.

Basically I have the same question as this: security.stackexchange.com/q/1

Can I install a web app on "someone else's computer" in a way that the browser notices if it was tampered with on the server? The question is from 2017, so maybe things move forward. As I say in the comment:

> Like an SSL certificate verifies the host name, could a certificate not also verify the content.

(Would be nice to get boosts towards the network security bubble.)

Information Security Stack ExchangeHow to protect web app users from server compromise?I would like to create a web app that runs on a server I don't physically control (e.g., on Google Cloud). I want to protect my users from the possibility of the server being compromised and sending

So I've been using my laptop with the wrong date for a while and #certificate errors meant I could only see #websites when the stars aligned.

This was the most productive I've been for a while.

So I decided to make this a #browser extension:

**Block selected websites, 90% of the time**

codeberg.org/dcz/webBlocker

No more mindless scrolling! No more constant Wikipedia binges! Just occasional ones. It's fine to have fun once in a while.

Summary card of repository dcz/webBlocker
Codeberg.orgwebBlockerStop wasting time on the Web!

ISO Certification in Qatar | Quality Control Certification

ISO Certification in Qatar process, including ISO 9001, ISO 14001, ISO 45001, and ISO 27001, ensures businesses adhere to international standards for quality, safety, and efficiency, improving credibility, regulatory acquiescence, and operational performance.

Visit: qccertification.com/BlogDetail
#Certification
#Certificate
#Certified

ISO Certification in Australia | Quality Control Certification

ISO certification in Australia sures businesses meet international standards for quality, safety, and efficiency. Common certifications include ISO 9001, ISO 14001, ISO 45001, and ISO 27001. Achieving certification improve credibility, regulatory receptivity, and operational performance.

Visit: qccertification.com/BlogDetail
#Certification
#Certificate
#Certified

Haven’t used Certbot for a very long time, and right now start cleaning older certificates on a old server to start preparing migration, and now I noticed this really weird, stupid and mostly dangerous behavior: if you use the command `revoke`, it won’t ask if you are sure if you want to revoke the certificate, but it will ask you if you want to delete the certificate locally…. The revoke step is COMPLETELY SILENT.

Is today #FediHire Friday? Sure looks like it!

What I'm looking for: A senior level, individual contributor role supporting Windows, Active Directory, Certificates, PKI, Azure, and information security in a large environment. Interested in relocating outside of the US. I like to solve weird problems and make computers run smoothly. I want to help others use technology effectively.

My main focus the last few years has been rebuilding and modernizing a struggling certificate management team. That includes growing the team to meet our company needs, migrating our AD-integrated private PKI stack, getting a handle on our web PKI consumption, and making massive improvements to our certificate lifecycle management platform. I supported and advised our CyberSec and Desktop teams as we rolled out multi-factor authentication to 50,000 employees and contractors across the US. My background in understanding deep computer fundamentals, talent for quickly grasping nuances of larger systems, and calmness in a crisis have contributed to quickly resolving major technology outages regardless of root cause.

This role hasn't been exclusively technical. A big part of my current job is building relationships with our developers to help them understand how certificates work, the responsible ways to use them, and what our relevant internal policies are. I've been training and teaching junior and mid-level engineers both practical PKI concepts and our specific enterprise requirements. I've gotten to spend some time with upper management to both explain the immediate challenges we've had and the plans we can implement improve our infrastructure, reducing costs and outages.

While this position has been focused on certs and how to use them, I'm very comfortable considering a technical leadership role for Windows (server and desktop) administration and Active Directory. I also have some good experience with Azure and virtualization platforms, but they haven't been my daily focus for several years.

My current employer is direct retail for general public consumers. I've also worked in banking/finance, manufacturing, and architecture firms. The common thread is I love to help people leverage technology for their goals, to help them be more effective.

In my personnel/volunteer time I've done very similar: working backstage with lights/sounds/projections so live performers can do their best.

Right now I'm in Syracuse, New York (about five hours from NYC), but I'm open to relocation/migration anywhere in the world.

PMs open if you want to talk details. Boosts/reshares appreciated.

🌐 In the past three days, I've switched my #homelab to a new #ReverseProxy! After using #NginxProxyManager and #Zoraxy, I've now moved to #Pangolin.

Pangolin allows me to provide my #selfhosted services from my home lab without needing to open a port in my #firewall. 🔒

Essentially, it's a self-hosted alternative to #CloudflareTunnels, running on a #VPS. Due to the current political situation in the #USA, I preferred not to use Cloudflare.

Pangolin is based on #WireGuard and #Newt, enabling a #certificate-based direct connection after installing a client on the home server. 🔗

I'm extremely satisfied with it and now have no open ports in my private #network! 🎉

github.com/fosrl/pangolin

Tunneled Mesh Reverse Proxy Server with Identity and Access Control and Dashboard UI - fosrl/pangolin
GitHubGitHub - fosrl/pangolin: Tunneled Mesh Reverse Proxy Server with Identity and Access Control and Dashboard UITunneled Mesh Reverse Proxy Server with Identity and Access Control and Dashboard UI - fosrl/pangolin

Firefox users should check which version they have installed. On Friday, March 14, certain extensions and streaming services may stop working on all Firefox versions older than Firefox 128 (or ESR 115.13).

#firefox #browser #extension #certificate
pcworld.com/article/2633933/up

PCWorld · Update Firefox now! Extensions and streaming sites could break otherwiseBy Laura Pippig