Create accountLogin

Recent searches

No recent searches

Search options

Not available on dice.camp.
dice.camp is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon server for RPG folks to hang out and talk. Not owned by a billionaire.

Administered by:

Server stats:

1.7K
active users

dice.camp: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#devops

37 posts35 participants5 posts today
Public
Joaquim Homrighausen

Does anyone have experience with LetsEncrypt (certbot) and DNSSEC? 🤔

I have an issue with a hostname in a domain (that I do not have admin access to). The domain has a DS record, and certbot complains about invalid CAA this or that.

I found this, but can't really figure out if this points me to the issue at hand:

community.letsencrypt.org/t/no

Let's Encrypt Community Support · No CAA + DNSSEC - nonexistence proof = issuance failureI suspect this is working as intended, but I’d like to verify. We attempted to have a certificate issued for a domain that had no blocking CAA record, had DNSSEC enabled, and the authoritative NS did not provide a non-existence proof for the CAA type (making the lack of CAA record invalid). Is this a necessary security feature, or a potential oversight? It seems to me DV with DNSSEC would necessarily require crypto proofs for the A/AAAA/TXT records which are used to prove ownership, not the C...
#certbot#letsencrypt#dnssec
Continued thread
Public
Jan Schaumann

System Administration

Week 12, System Security III: From the Attack Life Cycle to Zero Trust

In this video, we continue approaching System Security from an attacker's point of view by understanding their common processes, following the Attack Life Cycle (with doggos!) and then identifying how our defenses, supported by the Zero Trust model, can interrupt each stage.

youtu.be/mNxHw5XzxJw

YouTubeCS615 System Administration, Week 11, Segment 3 - System Security: Attack Life Cycle to Zero TrustBy cs615asa
#SysAdmin#SRE#DevOps
Public
Jessica Tegner 👩🏻‍🦰

Someone that also works on a project I worked on ( and created) tried to do a quick one and close a pr with comments on from me, and blockers on the code review, open a new pr with the same changes (and a release tag) and quickly merge it in to main, since that new pr didn't have any blockers.

WTF. If you try to do that at any job, you would be fired.

#git#devops#wtf
Continued thread
Public
Jan Schaumann

System Administration

Week 12, System Security II: Defining a Threat Model

In this video, we look at the concept of a Threat Model and how the attack economics may shift based on your adversaries capabilities and motives. We introduce the STRIDE and DREAD models and draw a few circles, of course.

youtu.be/nZQboq3gjgg

YouTubeCS615 System Administration, Week 11, Segment 2 -- System Security II: Defining a Threat ModelBy cs615asa
#SysAdmin#SRE#DevOps
Continued thread
Public
Jan Schaumann

System Administration

Week 12, System Security I: Risk Assessment

In this video, we begin our dedicated discussion of System Security with a look back at how we've talked about security relevant aspects in previous videos and then moving forward to defining how we can begin to assess risk rather than attempt to "secure" a system.

youtu.be/KZi9ZWF6vWI

YouTubeCS615 System Administration, Week 11, Segment 1 - System Security I: Risk AssessmentBy cs615asa
#SysAdmin#SRE#DevOps
Continued thread
Public
Jan Schaumann

System Administration

Week 11, Configuration Management II

In this video, we continue our discussion of configuration management systems. We talk about state assertion, what states of a host we might care about, the CAP theorem and other fallacies of distributed systems, idempotence, eventual consistency and convergence, and the overlap of CM systems with other infrastructure components, yielding, eventually, infrastructure as a service.

youtu.be/FJSpmBPv1J4

YouTubeCS615 System Administration, Week 10, Segment 2 - Configuration Management, Part IIBy cs615asa
#SysAdmin#SRE#DevOps
ExploreLive feeds
About