3 ms·
There's no excuse now that we have LetsEncrypt. Thank you!
by diegorbaquero 10y ago
There's no excuse now that we have LetsEncrypt.
Thank you!
- Mahn 10y agoLetsEncrypt still has some limitations though, namely no wildcard certificates, which means you need to issue and update certificates for every subdomain individually. Certbot helps, but it's still a hassle at a certain scale. We'd gladly migrate to LetsEncrypt, but for us (+40 subdomains) it's still far simpler to manage using a paid wildcard certificate from CAcert.
- mordocai 10y agoTo be fair, you can do a large amount of subdomains (I don't remember the limit) with one certificate request on letsencrypt. Of course, if you're going to be changing them often then it becomes a real PITA.
- zzzcpan 10y agoNot an option for websites with lots of subdomains. And probably will never be.
- zeveb 10y agoThe Right Thing™, of course, would be to accept that if you own a domain you own all subdomains, and delegate the authority to certify subdomains to you, the owner. Why can't you issue certificates for your subdomains? Running OpenSSL is as easy for you as it is for a CA.
- paulddraper 10y agoSure, but someone has to let you be a CA. IDK why Let's Enrypt has this policy.
- zeveb 10y agoOne should be allowed to be a CA for everything under one's domain, and nothing else. The idea that every CA must necessarily be trusted for every name in the world is … insane.