• 0 Posts
  • 71 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle




  • My example applied to all distros, the difference would be the time it takes that code change (which resolved a critical to me bug) takes to actually be available to use.

    There’s also very little that’s specific to me about that, it’s a real use case that comes up repeatedly for new releases that tend to push things graphically. I’m only going to recommend distros that minimize the time to get those fixes because it’s a better user experience for the target demographic with little downside.















  • Import it into the trust store in the browser/OS. It should be the same (or very similar) operation for a self-signed cert and a CA that isn’t subordinate to the standard internet root CAs.

    If you can’t import your own root CA cert then you’re probably screwed on both fronts and are going to have to use certs issued by a public CA that’s subordinate to a commonly trusted root CA.

    My point here is that there’s little distinguishing a self-signed cert and a cert issued by your own private CA for most people that are self-hosting.