TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

We ensure Cloudflare customers aren't affected by LE's certificate chain change

36 点作者 stanleydrew大约 1 年前

7 条评论

dividuum大约 1 年前
I'm surprised they basically choose to ignore explicitly made CAA records, if they don’t match any of their CAs. Why bother with setting up CAA records at all if they will be silently ignored?
评论 #40036883 未加载
skybrian大约 1 年前
Most big changes like this get rolled out gradually, but an expiration date causes things to break everywhere at once. They can minimize that impact with this change. Other websites will break first.<p>But I wonder if they will start using Let&#x27;s Encrypt again later, in a more gradual way? For example, on any new websites that launch after the expiration date?
superkuh大约 1 年前
It&#x27;s hard to criticize them for this in this context and I think that&#x27;s the point. Otherwise, &quot;We are dumping Lets Encrypt and switching to some CA&quot; doesn&#x27;t sound quite as nice.
blissofbeing大约 1 年前
Which CAs will they be using instead?
encom大约 1 年前
&gt;MITM-as-a-Service switches CA.
评论 #40032038 未加载
评论 #40027707 未加载
behringer大约 1 年前
Someone should tell cloudlare that certificates expire for a reason.
评论 #40028617 未加载
floodedburner大约 1 年前
Read this as LE = Law Enforcement<p>What a poor title change.
评论 #40033141 未加载