3 ms·
Not an option for websites with lots of subdomains. And probably will never be.
by zzzcpan 10y ago
Not an option for websites with lots of subdomains. And probably will never be.
- zeveb 10y agoThe Right Thing™, of course, would be to accept that if you own a domain you own all subdomains, and delegate the authority to certify subdomains to you, the owner. Why can't you issue certificates for your subdomains? Running OpenSSL is as easy for you as it is for a CA.
- paulddraper 10y agoSure, but someone has to let you be a CA. IDK why Let's Enrypt has this policy.
- zeveb 10y agoOne should be allowed to be a CA for everything under one's domain, and nothing else. The idea that every CA must necessarily be trusted for every name in the world is … insane.