S. Bortzmeyer ✅ utilise mastodon.gougere.fr. Vous pouvez læ suivre et interagir si vous possédez un compte quelque part dans le "fediverse".
Si ce n’est pas le cas, vous pouvez en créer un ici.
the more I read about this Trustico incident, the more absurd it gets
what the actual fuck
its called a *private* key for a reason
don't let the certificate authority generate it for you and/or give it to the certificate authority
the only thing you are supposed to give to the certificate authority is the certificate signature request (CSR) and they give you the certificate after the validation process
@staticsafe It should be noted that #Trustico ads were framing this as an advantage (green checkmark) "no need to send a CSR"
@staticsafe And, to play devil's advocate, there are probably some users that would manage their private keys even more badly than #Trustico did.
Ping @aeris @Keltounet