[tech] SSL on various services with LetsEncrypt

[Mark Tearle]

On Fri, 7 Dec 2018, at 3:11 PM, James Andrewartha wrote:
> On Fri, 7 Dec 2018, David Adam wrote:
> 
> > On Fri, 7 Dec 2018, Felix von Perger wrote:
> > > [CFE] and I worked on enabling / fixing SSL on a bunch of services today. This
> > > hopefully hasn't broken anything significant.
> 
> There are a bunch of Let's Encrypt certs that aren't renewing properly, 
> there was an auto-discard notification which hostmasters would have seen, 
> I'll forward it to wheel at . Can we move the webhosting over to using a 
> wildcard?
> 

Perhaps some discussion on which hosts the cert would live upon, and what our security model is here?

Mark
--
Mark Tearle <mtearle at ucc.asn.au>