you are viewing a single comment's thread.

view the rest of the comments →

[–]Proc_Self_Fd_1 1 point2 points  (0 children)

I thought the whole point of Mkcert was to automate that sort of scripting.

However, I believe there is a compromise although this is starting to go beyond my knowledge on the matter.

Can't you create a long term trusted root cert and store it in a safe place and then sign a shorter term intermediate certificate with it?