Does anyone have any advice on how to debug certificate issues with #kamal and #thruster for a #rails application?

I'm seeing `server name component count invalid`.

https://github.com/basecamp/kamal/discussions/1453

Let's Encrypt soon starts offering TLS certificates with just 6 days of lifetime. It's just an option and the 90 day certs are also still offered but I doubt that this will add a lot of security.

https://letsencrypt.org/2025/01/16/6-day-and-ip-certs/

Based on the number of occasions, I already had problems with the 90days renewals in the past (software bugs and human error), I see this the value in this move rather sceptical.

Why I Understand Hoarders

To be clear, I am not a hoarder. I have downsized more often than I can count and I regularly donate items to the thrift store. At the same time, I have some things that are very hard to dispose of.

This week, my focus is on the artwork created by my late husband. He was very talented at drawing and painting and he occupied a lot of his work time and personal time being creative. Some of his works are excellent, some are okay, and some are . . . well, not great. That’s what the creative life is like. Variable.

At some point, I forwarded some of his best works to family members and friends so that they all could have a creative remembrance of him. But even after that, I still have a lot of drawings, paintings, and notes to make decisions about.

There are some excellent pieces, some okay pieces, and some not-so-great pieces that all occupy a space in my apartment, and I don’t know what to do with it all. The not-knowing is the hard part. I emailed my children to see if they wanted any of it, and they declined. So, the choices are left to me but they are not easy choices.

When I mentioned my dilemma to a friend she shared her own question about what to do with her late husband’s many award plaques that were of value to him, and appreciated by those who loved him, but otherwise not destined for display.

How do you dispose of artwork, or certificates of excellence, or plaques for awards, when their recipient has passed on? They all belong in the category of too-extraneous-to keep-but-too-good-to-trash, and they cannot easily be thrown in a dumpster.

As such, today I chose a compromise. I met with a photographer who specializes in artwork to have some of my husband’s illustrations digitized. Many decades ago my husband created two books for children on watercolour paper, but they were never published. Since then they have languished in a portfolio which has been relocated multiple times and now sits under my guest-room bed.

When I showed the pages to the photographer we discussed how best to deal with the stains from moisture, the leaching from adjacent pages, and warping. We were talking about many decades of neglect. Ultimately, though, he thought that he and his computer could do them justice. I will be interested to see what he comes up with.

The question I am still left with now, though, is what I should do with the originals.  I don’t know if I am capable of putting them in the garbage containers in my apartment building. I don’t even know if I could put them in the paper recycling bin. Does anyone know? Perhaps they are just trash. Either way, I think I’ll simply ask the photographer to do it. I might even pay him to do it. That’s a good hoarder’s solution, don’t you think?

New 6-days Validity of Let’s Encrypt Certificates

I just saw this great news: Let’s Encrypt Announces 6-day Validity Certificates

Let’s Encrypt, the non-profit certificate authority, has introduced six-day validity certificates, commonly referred to as short-lived certificates.

Shorter validity periods are great for security. Traditional certificates can last up to a year, meaning if they get compromised, they remain a threat for a long […]

https://www.locked.de/new-6-days-validity-of-lets-encrypt-certificates/
#Certificates #LetsEncrypt #Security

What happens when Let's Encrypt does an OpenAI move and switches to for-profit after certificate expiry times are reduced to less than 1 week?
#letsencrypt #resilience #tls #ssl #certificates

All I'm saying is that it's a huge dependency especially if other TLS stakeholders want to minimize the window of valid certificates. We're increasing fragility by depending on Let's Encrypt.

Everybody should have #fun with #Apple #certificates and #provisioning profiles at 5 am in the #morning.

Let's Encrypt ending expiration emails

#certificates #ssl #mail #email #letsencrypt #notifications #selfhosting #selfhosted

https://letsencrypt.org/2025/01/22/ending-expiration-emails/

New #year, new #hope, new #trust.
All #servers and #instances #docker #kubernetes #k8 are now running with renewed #certificates.
#ssl #tls #openssl #openvpn #shell #cli #key #req #crt

Become your own certificate authority (CA), with #easyrsa
#pki #ca

Google is kwaadaardig

Extreem zelfs, zij hosten -zonder blikken of blozen- zelfs phishingwebsites met de volgende URL's (ik heb ".com" vervangen door "·com", met "hoge" punt, en de '/' door '⧸', om onbedoeld openen te voorkómen):

https:⧸⧸helpdesk-google·com
https:⧸⧸cancel-google·com
https:⧸⧸adsupport-google·com

Veel meer info in https://www.security.nl/posting/872651/https%3A__cancel-google%C2%B7com.

Edit 15:14: ik zie dat de redactie van security.nl mijn artikel heeft verwijderd (tot zover vrijheid van meningsuiting). Ik had het artikel gearchiveerd: https://archive.is/3UwWn.

If it's not DNS, it's certificates

https://stackoverflow.com/q/79340672/63009
https://github.com/docker/for-mac/issues/7520

rpki-client stricter aging policy for Trust Anchor certificates commited to -current https://www.undeadly.org/cgi?action=article;sid=20241219163800 #openbsd #rpki-client #rpki #routing #certificates #trustanchor #ta #networking #bgp #freesoftware #libresoftware

#Carbon #Certificates are BS cause they are wide open for fraud.
But not only carbon certificates .... most certificates are pure BS generating leech jobs without any value added.
#dw https://youtu.be/aU_S97Ae1eg

Short-Lived Certificates Coming to Let’s Encrypt

Starting next year:
Our longstanding offering won’t fundamentally change next year, but we are going to introduce a new offering that’s a big shift fr... https://www.schneier.com/blog/archives/2024/12/short-lived-certificates-coming-to-lets-encrypt.html

A Note from our Executive Director - Let's #Encrypt

Our longstanding offering won’t fundamentally change next year, but we are going to introduce a new offering that’s a big shift from anything we’ve done before - short-lived #certificates. Specifically, certificates with a lifetime of six days. This is a big upgrade for the #security of the #TLS ecosystem because it minimizes exposure time during a key compromise event.
#privacy #encryption

https://letsencrypt.org/2024/12/11/eoy-letter-2024/

I have to have addons.mozilla.org access API key to sign an extension I will only use by myself, so I can not enable enabling unsigned extensions.

IMO this is what the enforcing of only either a CA based approach or an insecure approach, kicking out the self-signed option, leads to (yes, I am referring to TLS certificates).