[atlas] SSL Certificates for ripe anchors

Hi all,

Le 9/3/2019 à 1:34 PM, Carsten Schiefner a écrit :
>>> [...]
>> You can renew Let's Encrypt certificates without changing the key.  And
>> if you use the recommended 3 1 1 TLSA records, then you don't have to
>> change it unless the key is changed.
> ah! :-)
>
> Would you have a specific pointer in mind you’d recommend and so like to share?

Dear Carsten,
...i've started to read this
<https://community.letsencrypt.org/t/please-avoid-3-0-1-and-3-0-2-dane-tlsa-records-with-le-certificates/7022>
one.
Hope you will find it relevant.

Thanks.
Shalom,
--sb.

>
> Thanks & best,
>
> -C.
>
-- 

Regards,
Sylvain B.
<http://www.chretiennement.org> 
__
Website : <https://www.cmnog.cm>
Wiki : <https://www.cmnog.cm/dokuwiki>
Surveys : <https://survey.cmnog.cm>
Subscribe to Mailing List : <https://lists.cmnog.cm/mailman/listinfo/cmnog/>
Mailing List's Archives : <https://lists.cmnog.cm/pipermail/cmnog/>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x0387408365AC8594.asc
Type: application/pgp-keys
Size: 4826 bytes
Desc: not available
URL: </ripe/mail/archives/ripe-atlas/attachments/20190903/e7725372/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: </ripe/mail/archives/ripe-atlas/attachments/20190903/e7725372/attachment.sig>