this post was submitted on 02 Oct 2023
310 points (93.8% liked)

Sysadmin

7739 readers
2 users here now

A community dedicated to the profession of IT Systems Administration

No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
[email protected]
[email protected]
[email protected]
[email protected]

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 6 points 1 year ago (2 children)

Mtls across a large number of machines. I run my own CA and intermediates on hashicorp vault.

For end user services, yes LE.

[–] [email protected] 5 points 1 year ago

At the point of running your own CA with infrastructure in place to support it, I wouldn’t really call that “self signing.”

I get that it technically is, since you’re not going through an external CA, but really it’s like calling a companies Datacenter “self hosted” because it’s on their own hardware. Technically the truth, but not what is generally meant. 😜

[–] Sandbag 1 points 1 year ago (1 children)
[–] [email protected] 1 points 1 year ago