daniel:// stenberg:// @bagder@mastodon.social
Public

Addressing Linux’s Missing PKI Infrastructure

"we’re starting the development of upki: a universal PKI tool. This project initially aims to close the revocation gap through the combination of a new system utility and eventual library support for common TLS/SSL libraries such as OpenSSL, GnuTLS and rustls"

discourse.ubuntu.com/t/address

Addressing Linux's Missing PKI Infrastructure

Earlier this year, LWN featured an excellent article titled “Linux’s missing CRL infrastructure”. The article highlighted a number of key issues surrounding traditional Public Key Infrastructure (PKI), but critically noted how even the available measures are effectively ignored by the majority of system-level software on Linux. One of the motivators for the discussion is that the Online Certificate Status Protocol (OCSP) will cease to be supported by Let’s Encrypt. The remaining alternative is ...

discourse.ubuntu.com · Ubuntu Community Hub

0
6
0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.social/users/bagder/statuses/115689537982500208 on your instance and quote it. (Note that quoting is not supported in Mastodon.)