Random Thread - Anything Goes

coliver

@JaredBusch said in Random Thread - Anything Goes:

@coliver said in Random Thread - Anything Goes:

@hobbit666 said in Random Thread - Anything Goes:

@coliver said in Random Thread - Anything Goes:

This was going to my answer. It's so easy to setup HTTPS that it makes no sense not to.

Ok so next level. Use a Certificate from an internal CA? As you can't use something like Letsencrypt

Or just use HTTPS

Why wouldn't Let'sEncrypt work? Do these systems not have access to the internet at all?

That’s not how let’s encrypt works. LE has to reach back to the device you cannot port forward everything to everything. I fucking hate how people think that let’s encrypt is the master solution for SSL because it is not

There are tons of alternatives to this. Even having a single "public" system getting a wildcard and then pushing that cert to the systems that need it would be fairly easy to script.