4 ms·

Why do this when letsencrypt.org provides free trusted SSL certs?

• brianwawok 10y ago
  There are missing edge cases with this. Say I want to serve a static HTML website from a Google cloud storage over SSL. No way to do this for free with let's encrypt. 1 click and free with cloud flare. Is there MITM chance between cloud flare and Google? Yes. For a static website with no login or input from users, seems safer than any free alternative I know of.
  • true_religion 10y ago
    Doesn't Google offer a generic domain for you to use, like amazon has s3.amazon.com with some information about your username in the URL or subdomain?
    • jlgaddis 10y ago
      Even if they do, how do you expect to get a valid (i.e. trusted) certificate for an FQDN that ends with ".google.com"?
      • true_religion 10y ago
        I'd expect they'd use something like star-certs, and give you a heyuser.storagegcd.com
        • jlgaddis 10y ago
          Forgive my ignorance, but what is a "star-cert"?
          • true_religion 10y ago
            Oh I think I just used a bit of jargon there. It's canonically called a Wildcard Certificate [0] [0] https://en.wikipedia.org/wiki/Wildcard_certificate https://en.wikipedia.org/wiki/Wildcard_certificate
      • brianwawok 10y ago
        No you host from your own domain. https://cloud.google.com/storage/docs/hosting-static-website https://cloud.google.com/storage/docs/hosting-static-website Gives you a site at your name.com Only missing link is the HTTPS which you get with cloud flare