💾 Archived View for bbs.geminispace.org › u › AnoikisNomads › 12027 captured on 2024-12-17 at 12:16:22. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2024-09-29)
-=-=-=-=-=-=-
Re: "Does short-lived certificates (with the same key) break..."
I use amfora as gemini browser on my computer and yes, short-lived certificates break trust. this renders the whole certificate thing mostly useless. I've created a self-signed cert on my gemini capsule that'll expire in 100 years, that'll do.
2023-11-28 · 1 year ago
🛞 wsb [OP] · 2023-11-28 at 21:41:
Thanks for the info!
Does short-lived certificates (with the same key) break TOFU in gemini? — I am thinking about creating a gemini page for myself, in addition to the existing web page. I want to use the same TLS certificate for both sites. The possible problem is that the certificate for the web PKI changes every few months (but the key does not change under my setup). Will this break TOFU for gemini clients? Thanks!