• nomad@infosec.pub
    2·
    2 days ago

    I guess that’s a magic bullet then… Just ensure you are using a certificate chain that’s not issued by a authority inside the country.

    • tenchiken@anarchist.nexusEnglish
      2·
      2 days ago

      Along that line, I’d be self signing and requiring a specific client cert to allow connection.

      But yes absolutely good point