<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Apr 10, 2019, at 6:57 AM, Noah <<a href="mailto:noah@neo.co.tz" class="">noah@neo.co.tz</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><br class=""></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Apr 10, 2019 at 4:04 PM Owen DeLong <<a href="mailto:owen@delong.com" class="">owen@delong.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;" class="">If you automate the process, you have to store the private key in a manner in which it can be accessed automatically.<br class=""></div></blockquote><div class=""><br class=""></div><div class="">The only process that needs automation is the timing of when certificates expire next [1] so as to best inform the humans and invoke pro-activeness which includes offline testing to avoid any human errors that may result in live production. <br class=""></div><div class=""><br class=""></div><div class="">Noah</div><div class="">[1] they indicated the monitoring system picked the issue up but perhaps more pro-activeness and offline testing to avoid human errors in the future would come in handy.<br class=""></div></div></div></div>
</div></blockquote></div><br class=""><div class="">AIUI, the timing is every 30 days and the humans were notified 15 days ahead and failed to act.</div><div class=""><br class=""></div><div class="">Further, AIUI, they’ve taken steps to make sure that the humans don’t fail to act on such notification in the future.</div><div class=""><br class=""></div><div class="">I ask that AfriNIC staff provide clarification if either of my above understandings of their report is inaccurate.</div><div class=""><br class=""></div><div class="">Owen</div><div class=""><br class=""></div></body></html>