Create and update CAA records #675

New Issue

Closed

opened 2023-10-25 17:18:26 +02:00 by muppeth · 1 comment

muppeth commented

2023-10-25 17:18:26 +02:00

Owner

In light of the recent blog post https://notes.valdikss.org.ru/jabber.ru-mitm/ unfolding MITM attack commited by Hetzner/Linode on one of the xmpp servers, we decided to add some protection to our certificates. One thing is to add CAA records on all subdomains hosting services adding letsencrypt account number and forcing that check.

In light of the recent blog post https://notes.valdikss.org.ru/jabber.ru-mitm/ unfolding MITM attack commited by Hetzner/Linode on one of the xmpp servers, we decided to add some protection to our certificates. One thing is to add CAA records on all subdomains hosting services adding letsencrypt account number and forcing that check.

muppeth added this to the 23.10 - October milestone 2023-10-25 17:18:26 +02:00

muppeth self-assigned this 2023-10-25 17:18:33 +02:00

muppeth commented

2023-10-25 17:18:57 +02:00

Author

Owner

It's been done for all services adding apropriate records.

It's been done for all services adding apropriate records.

muppeth closed this issue

2023-10-25 17:18:57 +02:00

Sign in to join this conversation.

No Label

Feature request

🤔️ Investigate

spam-protection

No Milestone

No project

No Assignees

1 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Disroot/Disroot-Project#675

No description provided.