thesabear f4ef56d229 secrets-and-pki: add real evidence for the asymmetric-trust and cert-renewal claims ...

Step 5 re-audit. Caddyfile contrast (skip-verify default vs Vault's
real cert verification block) shown as text, IP/domain genericized.
The cert-rebuild hook script's real 19-day-expiry story is shown as a
screenshot instead of a text excerpt - the script has a hardcoded P12
password in its body, so a screenshot with that one line blurred shows
the actual guard logic in full without a text-copy risk of the
password ever landing in a file.

2026-08-28 21:48:09 +03:00

164 KiB

1519x941px

Raw History