[Cryptech Tech] Some problems with the repo access

[Jakob Schlyter]

On 14 feb 2014, at 08:31, Randy Bush <randy at psg.com> wrote:

> actually, i think it is high end geeks and security people, all of whom
> will understand, if not always agree with <g>, the root which is not
> among the 300 dynamically changing against your will ones in your
> browser.

We should at least do TLSA (3 1 1) for the website:

_443._tcp.cryptech.is. IN TLSA 3 1 1 b348d66d3e8b24437a9857bb3210ffd503f7e3f97a481d97bc07306870aa8873

and enable strict transport security so that people will use HTTPS forever.


IMHO,


	jakob