Selfhosted

62233 readers

687 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

317

Letsencrypt is under US jurisdiction. Is there a free-er alternative? (sopuli.xyz)

submitted 1 day ago by Sibbo@sopuli.xyz to c/selfhosted@lemmy.world

133 comments fedilink hide all child comments

I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

you are viewing a single comment's thread
view the rest of the comments

[–] T4V0@lemmy.pt 1 points 13 hours ago (1 children)

Orion browser (maybe safari?) on iOS detected the revoked certificate, and asked me to confirm before accessing the website while warning about the dangers.

[–] Passerby6497@lemmy.world 2 points 10 hours ago* (last edited 10 hours ago) (1 children)

Does regular safari show the same prompt? Afaik, browsers on iOS are safari reskins, so I'm curious if they added his cert in directly again, or if the onion browser actually follows standards the os browser doesn't.

[–] T4V0@lemmy.pt 2 points 8 hours ago (1 children)

Yes, but safari doesn't even let me ignore the warning, it has a explanation in detail, and only allows closing the website.

[–] dogdeanafternoon@lemmy.ca 1 points 4 hours ago (1 children)

You didn’t look hard enough. My router cert isn’t valid and I have to bypass the warning every time.

[–] T4V0@lemmy.pt 2 points 4 hours ago* (last edited 4 hours ago) (1 children)

Maybe there’s a special case for local subnets?

Here’s what shows up for me (in portuguese):

Safari browser invalid certificate warning page.

Clicking on more details, only allows me to check the certificate:

Safari browser detailed information for invalid certificate warning.

Here’s the translated details:

Safari warns you when a website has an invalid certificate. This can happen if an attacker has compromised your connection. For your protection, you cannot visit this site. You can check later to see if the problem has been solved. You can also contact the site owner to report this error.

To learn more, you can see the certificate.

Said certificate:

iOS invalid certificate information.

Edit: on the latest iOS version (27) btw.

[–] dogdeanafternoon@lemmy.ca 2 points 2 hours ago

Thanks for the proof! I stand corrected! I see basically the same but after the view link there is another think that bypasses it.

Must be difference between expired vs compromised cert.