Netflix/bettertls
View on GitHub ↗ ★ 183 Go
BetterTLS: A Name Constraints test suite for HTTPS clients.
5 mentions on Hacker News by 1 person: 0 stories, 5 comments · first 2023-07-11 · latest 2024-10-22
20082026
-
…Personally, I think the public CA route is better and I built a site that explores this[2]. [1] https://github.com/Netflix/bettertls/issues/19 [2] https://www.getlocalcert.net/
comment by 8organicbits · 2024-10-22 · in Just want simple TLS for your .internal network? -
…to answer these sorts of questions, but somehow forgot to validate constraints set at the root: https://github.com/Netflix/bettertls/issues/19 Anecdotally, I've seen name constraints kick in for both Firefox and Chrome on a Linux distro,…
comment by 8organicbits · 2024-08-10 · in .INTERNAL is now reserved for private-use applications -
…what actually supports it as bettertls (the caniuse equivalent in this space) doesn't track it. https://github.com/Netflix/bettertls/issues/19
comment by 8organicbits · 2024-01-27 · in Proposed top-level domain string for private use: ".internal" -
…if the various software I use will enforce it. 1. https://alexsci.com/blog/name-non-constraint/ 2. https://github.com/Netflix/bettertls/issues/19
comment by 8organicbits · 2023-11-01 · in Show HN: Anchor – developer-friendly private CAs for internal TLS -
…ithub.com/cert-manager/cert-manager/issues/3655 [3] https://alexsci.com/blog/name-non-constraint/ [4] https://github.com/Netflix/bettertls/issues/19 [5] https://docs.aws.amazon.com/privateca/latest/userguide/secur...
comment by 8organicbits · 2023-07-11 · in Easy HTTPS for your private networks