Excuses. Wosign are giving away gratis SHA256 certs valid for up to 3 years, and supporting up to 100 AltNames[0]. They're in all the major trust stores, and c

Excuses. Wosign are giving away gratis SHA256 certs valid for up to 3 years, and supporting up to 100 AltNames[0]. They're in all the major trust stores, and cross-signed by Startcom (StartSSL). I believe free basic wildcard certs will come. Someone will eventually break formation. > want to support Android Gingerbread clients? No. Gingerbread is down to <5% of the Android user share and lots of apps already don't support it. XP is arguably more of a problem at 10-12%. IPv4 exhaustion is still mostly a problem of allocation. Big vendors already have a glut of IPs. Even the budget VPS providers don't seem to care if you spin up a dozen VMs just for the IP space, which isn't much more expensive than the $2/mo many charge for additional IPs. > Have you actually tried to implement DNSSEC? Yes, I have. It's one easy command with PowerDNS. [0] https://buy.wosign.com/free/ https://buy.wosign.com/free/