_  _ _    _        _              _     _
| \| (_)__| |_  ___| |__ _ ___  _ | |___| |_  _ _  ___ ___ _ _
| .` | / _| ' \/ _ \ / _` (_-< | || / _ \ ' \| ' \(_-</ _ \ ' \
|_|\_|_\__|_||_\___/_\__,_/__/  \__/\___/_||_|_||_/__/\___/_||_|

🔗 Return to homepage

📆 January 9, 2021 | ⏱️ 1 minute read | 🏷️ journal updates

Site Update 007

What's New

I provisioned a new TLS certificate from ZeroSSL¹. That's why there was some downtime yesterday on 0gitnick.xyz. By default Caddy² provisions TLS certs from Let's Encrypt³ with a P-256 public key. I don't trust NIST curves⁴ so 0gitnick.xyz uses a 4096 bit RSA key now. As of the time of this post all other clearnet site mirrors⁵ use 2048 bit RSA which is also secure.

References

🔗 [1]: ZeroSSL (https://zerossl.com)
🔗 [2]: Caddy (https://caddyserver.com)
🔗 [3]: Let's Encrypt (https://letsencrypt.org)
🔗 [4]: NIST curves (https://safecurves.cr.yp.to)
🔗 [5]: clearnet site mirrors

Copyright © 2020-2024 Nicholas Johnson. CC BY-SA 4.0.