Post #2563454

2026-05-08 23:30 UTC

The recommendation in that thread is to run a private CA for your LAN. Anyone who has experience doing that outside of a managed (i.e., corporate) network will tell you how hilariously useless that advice is.

Replies (5)

@ryanc@infosec.exchange 2026-05-08 23:48

@owen@mastodon.transneptune.net I use acme-dns authorized subdomain certificates on my lab, this is nearly as unreasonable as running a CA for my home network. And I have run one on a corporate network.

Open ##2563456
@emma@orbital.horse 2026-05-09 00:25

@owen@mastodon.transneptune.net that's the network engineer version of "I'm praying for you," isn't it?

Open ##2563479
@ricci@discuss.systems 2026-05-09 00:54

@owen@mastodon.transneptune.net lol I gave up on doing that and I run my own mailserver, so yeah I have quite a bit of tolerance for technical pain

Open ##2563480
@jima@mspsocial.net 2026-05-10 22:41

@owen@mastodon.transneptune.net @becomethewaifu@tech.lgbt Sir, I have experience doing that *inside* of a managed (i.e., corporate) network, and I'll +1 your "how hilariously useless that advice is" point.

Open ##2563482
@nik@toot.teckids.org 2026-05-13 16:16

@owen@mastodon.transneptune.net Is it still that bad now we have ACME?

Open ##2563483