Another way to prevent this sort of #MitM with #LetsEncrypt is setting a strict CAA record with an accounturi (thanks npub1p7gsdexjcyl82py0zmf2gg4wxhkylt52u4tdeef70hfqp4s6pueqwgfm6f (npub1p7g…fm6f)):
https://letsencrypt.org/docs/caa/#the-accounturi-parameter
Ge0rG /
npub1tp…wxw26
2023-10-20 14:27:30
in reply to nevent1q…a3hs
Author Public Key
npub1tpmalgm5ssjtqq7rancvdk0m8hwd5z5ts67tg4p46raqjtxgw0qqzwxw26Published at
2023-10-20 14:27:30Event JSON
{
"id": "737d043e12e26b89917a20bb4ac0a64ff1c9b88a1092f5c6c408fc4cbfa569ae",
"pubkey": "5877dfa3748424b003c3ecf0c6d9fb3ddcda0a8b86bcb45435d0fa092cc873c0",
"created_at": 1697812050,
"kind": 1,
"tags": [
[
"p",
"0f9106e4d2c13e75048f16d2a422ae35ec4fae8ae556dce53e7dd200d61a0f32",
"wss://relay.mostr.pub"
],
[
"p",
"0b2c149b6fd1d6e8a6967451b3f11669d392c9af39f7bc21c70cd2182dbcc467",
"wss://relay.mostr.pub"
],
[
"e",
"770f423ff229134c7d6844d07a6e0b3cf4f25122d0328198269f2d8bb524da60",
"wss://relay.mostr.pub",
"reply"
],
[
"t",
"mitm"
],
[
"t",
"letsencrypt"
],
[
"proxy",
"https://chaos.social/users/ge0rg/statuses/111267810561424167",
"activitypub"
]
],
"content": "Another way to prevent this sort of #MitM with #LetsEncrypt is setting a strict CAA record with an accounturi (thanks nostr:npub1p7gsdexjcyl82py0zmf2gg4wxhkylt52u4tdeef70hfqp4s6pueqwgfm6f): \n\nhttps://letsencrypt.org/docs/caa/#the-accounturi-parameter",
"sig": "d7a7cf75662306b44254f330c8d50cfa7ca8eb233996cd1402223e469b8093b88e30b2942e5e8cdfa520faec15714068ad1f03b18e31ea35f2b88f8e9ad8c860"
}