Trying to avoid belaboring that all root certificates are self-signed in #TLSMastery.
It's in there, sure. But I want to put it on every page. Along with screaming "CAs are a scam!"
@mwlucas if you need commands for running your own crl and ocsp servers
for your own CA, I’ve got it!
@mwlucas oh. Something I forgot to mention. One thing I’ve noticed is that I’ve been noticed. I see regular probes to my ocsp server from google, microsoft, and apple
@david
DANE is in the DNSSEC book. Probably doing a new rev of that next.
Your own CA is a possibility. Debating that. I really want this to be a shorter book.