From: ldo@nz.invalid   
      
   On Sun, 1 Sep 2024 16:12:50 -0000 (UTC), bp wrote:   
      
   > In principle it would make sense to make a root CA for the three domains   
   > (zefox.com, zefox.net and zefox.org) under my control but if I disturb   
   > that one CA up all three become unreliable.   
      
   If these are names intended to be accessed by the general public, then you   
   need certs signed by official CAs that are trusted as standard by the   
   browsers that the general public uses.   
      
   Setting up your own private CA only works for authentication between   
   machines that you control.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)