3 ms·
The Right Thing™, of course, would be to accept that if you own a domain you own all subdomains, and delegate the authority to certify subdomains to you, the ow
by zeveb 10y ago
The Right Thing™, of course, would be to accept that if you own a domain you own all subdomains, and delegate the authority to certify subdomains to you, the owner.
Why can't you issue certificates for your subdomains? Running OpenSSL is as easy for you as it is for a CA.
- paulddraper 10y agoSure, but someone has to let you be a CA. IDK why Let's Enrypt has this policy.
- zeveb 10y agoOne should be allowed to be a CA for everything under one's domain, and nothing else. The idea that every CA must necessarily be trusted for every name in the world is … insane.