Timeline for Is it safe to send SSL certificates via email?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 17, 2015 at 22:03 | comment | added | halfer | @user2428118, I found SSL Labs, and was very impressed. It'd be great to have something similar that emails a periodic re-test every fortnight, and although SSL Labs has an API, they forbid re-offering it to the public. Would have made a good side project! | |
| Jul 17, 2015 at 10:11 | comment | added | user2428118 | "exactly what every visitor to your site would get every time they start a TLS session" - but only if your server is properly configured. There are way too many web sites out there that don't send all the immediate certificates needed to construct the certificate chain, which is not noted by the operators because their browser has picked them up previously from a properly configured web site. (Certificate errors will be shown to visitors whose browser hasn't picked up the certificates elsewhere yet.) Test tools like SSL Labs will help you find errors like this. | |
| Jul 16, 2015 at 13:30 | comment | added | halfer |
Righto, I think I need to do some reading. At least my CA reseller isn't doing anything silly though, I am now reassured :-).
|
|
| Jul 16, 2015 at 13:28 | vote | accept | halfer | ||
| Jul 16, 2015 at 15:49 | |||||
| Jul 16, 2015 at 12:51 | history | answered | mricon | CC BY-SA 3.0 |