Infisical PKI
Security and privacy
private certificate authority
SHOW HN2024
9points
5comments
#2,855of 3,515 in 2024
Top 82%of 2024 by points
How HN took it
CuriousMostly questions and neutral comments
0 positive, 4 neutral or asking, 0 mixed, 1 critical, out of 5 comments about the project. Thread score -0.14.
Idea: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
Objections
CA renewal workflow is manual and not yet automated
From 1 comment
We've laid out a pretty flexible foundation for this first release of Infisical PKI. The API is fully exposed, so you'd be able to orchestrate your own CA renewal workflow as you…
dangtony98 on HN
No migration path for existing CA hierarchies yet
From 1 comment
Not yet but we definitely have ideas for this coming up next on the roadmap. The basic idea would be to allow you to create CAs with external/imported CA options which would…
dangtony98 on HN
Step-CA is considered a better alternative
From 1 comment
Step-CA is much better
cvalka on HN
Requests
Automated CA renewal workflows
From 1 comment
If I have a CA hierarchy and my CA is expiring. How would y’all handle the CA renewal process for it?
ringstar on HN
Import existing CA hierarchies for migration
From 1 comment
What if I have an existing CA hierarchy in place already. Is this something I would be able to easily migrate to?
samejr on HN
Questions
How CA renewal is handled when a CA expires
From 1 comment
If I have a CA hierarchy and my CA is expiring. How would y’all handle the CA renewal process for it?
ringstar on HN
Alternatives named
Step-CA
From 1 comment
Step-CA is much better
cvalka on HN