Follow

LetsEncrypt recently reiterated the need for setting TLSA records for all of their certificates, including backup ones, not just the current X3. Here you can find convenient cheat-sheet with ready-to-use DNS records and appropriate hashes:

dnssec-stats.ant.isi.edu/~vikt

Note that X3 expires in March 2021 so while it's not a "had to be done yesterday" task, it's also not "let's put it into our todo for a decade" :) letsencrypt.org/2020/09/17/new

Show thread
Sign in to participate in the conversation
Mastodon 🔐 privacytools.io

Fast, secure and up-to-date instance. PrivacyTools provides knowledge and tools to protect your privacy against global mass surveillance.

Website: privacytools.io
Matrix Chat: chat.privacytools.io
Support us on OpenCollective, many contributions are tax deductible!