HcInfosecand won't this be detrimental to #letsencrypt themselves?
Because many companies use #geoblocking as policy, they will resort to #allowlisting #letsencrypt ip's. So people Will start exchanging and publishing the ip's of the #letsencrypt servers. These will become relatively easy prey for ddos attack?
So won't #letsencrypt become less stable as a service by this #geoblocking ban?
Why not use local servers (in the same region) and only fall back to other regio's or something?
#infosec #tls #linux #opensource
Kevin Karhan 
@mar I do think that #Allowlisting - like #Blocklisting should be supported...
I'd gladly add an #AllowList in addition to the existing #DenyList I have here:
https://github.com/greyhat-academy/lists.d/blob/main/activitypub.domains.block.list.tsv
Feel free to open up an issue and suggest it...
https://github.com/greyhat-academy/lists.d/issues/new
@yuki2501 I think that's a bad approach as this will only benefit #BigInstances and benefit #HostileTakeovers like those of #NSAbook:
Just like #eMail isn't #AllowListing-only!
This will basically make #SelfHosting impossible because neither will users manually request to have their instances be #allowed nor will admins bother to allow every small bona fide instance in.
@kuketzblog +9001%
Ohne #pfBlockerNG, #uBlockOrigin & #AdAway sowie #NoScript & #YesScript inkl. #JavaScript auf reines #Allowlisting beschränkt ist das #Internet unbenutzbar.
Ich blockiere aus Prinzip alle #Cookies & #Popups sowie #Werbung, denn dafür ist mir mein Traffic zu schade!