Yo Richard! On Thu, 28 Mar 2019 17:55:36 -0500 Richard Laager via devel <devel@ntpsec.org> wrote:
> On 3/28/19 5:47 PM, Gary E. Miller via devel wrote:
> > Don't care. I like that the cert is pinned.
>
> There is a downside. Every time it changes, you have to take a leap of
> faith when you re-pin it, rather than getting normal CA validation.
You miss the point, this is addition to normal CA validation, not
an alternative to it. Just like HPKP.
RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
g...@rellim.com Tel:+1 541 382 8588
Veritas liberabit vos. -- Quid est veritas?
"If you can’t measure it, you can’t improve it." - Lord Kelvin
pgpoVhTDKWwZ8.pgp
Description: OpenPGP digital signature
_______________________________________________ devel mailing list devel@ntpsec.org http://lists.ntpsec.org/mailman/listinfo/devel
