Where do I find security updates


#1

When there is a security update to the server software, how will I find out about it?

I’d love it if there was a mailing list I could subscribe to and just get an email alert.

I do want this to be as automated as possible.


#2

as far as I’m aware letsencrypt-auto should automatically check and update itself to the latest version every time it runs, so there is no need to manually update it. any security updates would be automatically included.


#3

Ok, that sounds good in many ways, but does potentially pose some security risks…

We might want to not give that code access to update itself automatically. We may want to control the timing with which it is done.

Just trying to figure out the best practices here. Is it just running with:
http://letsencrypt.readthedocs.org/en/latest/using.html#letsencrypt-auto


#4

New client versions are generally announced as a post in this forum. You can also track new releases via GitHub, for example using the atom feed.

There’s also a mailing list for client development, but it’s not just for announcements, so it could be a bit noisy for this purpose.


#5

Thanks about the atom feed.

There’s nothing specifically about security releases though I assume.

Maybe they could set up another list to send updates for email.

Twitter’s useful too, but generally not something that folks are going to notice with a river of content.


#6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.