Very minor wording changes to first line of Fingerprint Validation paragraph to improve the flow of the sentence.

PuceBaboon 2019-08-12 08:28:07 +09:00
parent 142ab6613f
commit ca3d8d5784
1 changed files with 1 additions and 1 deletions

2
TLS.md

@ -12,7 +12,7 @@ If you are using Letsencrypt to generate your server certificates, you should ac
### Fingerprint validation
The fingerprint is now calculated over the server's Public Key and no more its Certificate. The good news is that Public Key tend to change far less often than certificates, i.e. Letscencrypt triggers a certificate renewal every 3 months, the Public Key fingerprint will not change after a certificate renewal. The bad news is that there is no simple command to retrieve the server's Public Key fingerprint.
The fingerprint is now calculated on the server's Public Key and no longer on its Certificate. The good news is that Public Keys tend to change far less often than certificates, i.e. Letscencrypt triggers a certificate renewal every 3 months, the Public Key fingerprint will not change after a certificate renewal. The bad news is that there is no simple command to retrieve the server's Public Key fingerprint.
So to simplify your task, we have added two more options: 1/ auto-learn of fingerprint, 2/ disabling all-together the fingerprint validation.