Mastodon 🐘

0 posts0 participants0 posts today

BenjaminI just pushed a super-simple Makefile I've been using in one form or another to create a self-signed certificate for environments where you can't use a public CA, like a private network that's not accessible from the Internet:<a href="https://codeberg.org/blindcoder/ShareTheBasics/src/branch/main/self-signed-certificate" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://codeberg.org/blindcoder/ShareTheBasics/src/branch/main/self-signed-certificate</a><a href="https://toot.berlin/tags/ShareTheBasics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ShareTheBasics</a> <a href="https://toot.berlin/tags/HTTPS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HTTPS</a> <a href="https://toot.berlin/tags/Certificates" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Certificates</a> <a href="https://toot.berlin/tags/SelfSigned" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfSigned</a>

Y⃒̸̷̝̜̙ͥͥͥngmarIn case there were any doubts about my qualifications, I have a certificate!I do have doubts about whoever made that certificate though. Must be predating Unicode.I probably can demand a raise now. A few extra groats of buckwheat per week.<a href="https://social.tchncs.de/tags/SelfSigned" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfSigned</a> <a href="https://social.tchncs.de/tags/Certificate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Certificate</a> <a href="https://social.tchncs.de/tags/Certification" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Certification</a> <a href="https://social.tchncs.de/tags/Fridge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fridge</a> <a href="https://social.tchncs.de/tags/Refrigerator" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Refrigerator</a> <a href="https://social.tchncs.de/tags/Door" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Door</a> <a href="https://social.tchncs.de/tags/Hinge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hinge</a> <a href="https://social.tchncs.de/tags/%C5%AAnic%C3%B6de" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ūnicöde</a>

Kevin Karhan :verified:<a href="https://hachyderm.io/@lucasmz" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@lucasmz</a> yes and no..<ul><li>Yes in that one can just revoke said keys and deploy one's own!</li><li>No if you can't revoke the preset <a href="https://infosec.space/tags/CensorBoot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CensorBoot</a> keys in your <a href="https://infosec.space/tags/UEFI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UEFI</a>.</li><li>No in that these keys are default and that any revocation is 100% reversibe AFAICT.</li><li>No in that this would brick <a href="https://infosec.space/tags/Windows10" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows10</a>, <a href="https://infosec.space/tags/Windows11" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows11</a> and even some <a href="https://infosec.space/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> install media.</li></ul>Personally I'd wish for <a href="https://infosec.space/tags/heads" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#heads</a> and <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> <a href="https://infosec.space/tags/SelfSigned" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfSigned</a> code to be the norm providing the user/owner with full control over what is executeable!

robrich<a href="https://auth0.com/blog/test-authorization-in-aspnet-core-webapi-with-user-jwts-tool/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://auth0.com/blog/test-authorization-in-aspnet-core-webapi-with-user-jwts-tool/</a> - `dotnet user-jwts create --claim permissions=create:term` create <a href="https://hachyderm.io/tags/SelfSigned" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfSigned</a> <a href="https://hachyderm.io/tags/JWT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JWT</a> for an <a href="https://hachyderm.io/tags/ASPnet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ASPnet</a> site. Then `dotnet user-jwts list` to show created JWTs. Great for testing. Nice article <a href="https://www.linkedin.com/in/andreachiarelli/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.linkedin.com/in/andreachiarelli/</a>.

@zsoltsandor@social.lolSo, <a href="https://mastodon.social/tags/OpenKeychain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenKeychain</a> is unmaintained, and the code a mess, according to former devs. Otoh <a href="https://mastodon.social/tags/CipherMail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CipherMail</a> is actively developed. I'm not saying effective <a href="https://mastodon.social/tags/OpenPGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenPGP</a> on <a href="https://mastodon.social/tags/Android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Android</a> is dead, but it's not in an ideal state, when cool projects like <a href="https://fosstodon.org/@keyoxide" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@keyoxide</a> make <a href="https://mastodon.social/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> more exciting. However, maybe time for <a href="https://mastodon.social/tags/selfsigned" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfsigned</a> <a href="https://mastodon.social/tags/SMIME" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMIME</a>?

OPSEC Cybersecurity News Livehow to use a self signed certificate to intercept traffic in MITM attack [closed] <a href="https://security.stackexchange.com/questions/267171/how-to-use-a-self-signed-certificate-to-intercept-traffic-in-mitm-attack" rel="nofollow noopener noreferrer" target="_blank">https://security.stackexchange.com/questions/267171/how-to-use-a-self-signed-certificate-to-intercept-traffic-in-mitm-attack</a> <a href="https://aspiechattr.me/tags/maninthemiddle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#maninthemiddle</a> <a href="https://aspiechattr.me/tags/selfsigned" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfsigned</a> <a href="https://aspiechattr.me/tags/sniffing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sniffing</a>

Recent searches

Search options

Administered by:

Server stats:

#SelfSigned