Comment by 👤 AnoikisNomads

Re: "Does short-lived certificates (with the same key) break..."

In: u/wsb

I use amfora as gemini browser on my computer and yes, short-lived certificates break trust. this renders the whole certificate thing mostly useless. I've created a self-signed cert on my gemini capsule that'll expire in 100 years, that'll do.

👤 AnoikisNomads

2023-11-28 · 6 months ago

1 Later Comment

🛞 wsb [OP] · 2023-11-28 at 21:41:

Thanks for the info!

Original Post

🛞 wsb

Does short-lived certificates (with the same key) break TOFU in gemini? — I am thinking about creating a gemini page for myself, in addition to the existing web page. I want to use the same TLS certificate for both sites. The possible problem is that the certificate for the web PKI changes every few months (but the key does not change under my setup). Will this break TOFU for gemini clients? Thanks!

💬 4 comments · 2023-11-26 · 6 months ago