503
ICANN approves use of .internal domain for your network (www.theregister.com)
submitted 2 years ago by to c/selfhosted@lemmy.world
147 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 2 years ago (1 child)

As opposed to what, the domain certificate? Which can't be air-gapped because it needs to be used by services and reverse proxies.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago

    The domain certificate is public and its key is private? That's basically it, if anyone gets access to your key, they can sign with your name and generate certificates without your knowledge. That's my opinion and the main reason why I wouldn't have a self hosted CA, maybe I'm wrong or misled, but it's a lot of work to ensure everything is safe, only for a self hosted setup.

  • permalink
  • fedilink
  • source
  • parent