6 ms·
It is unclear to me how issuing certificates you have no intention of using in any way constitutes "other changes to increase performance or security of your we
by hlandau 10y ago
It is unclear to me how issuing certificates you have no intention of using in any way constitutes "other changes to increase performance or security of your website."
In fact it can only decrease security, as it increases the number of valid certificates in existence for a domain, and the number of certificates available to be compromised.
Logically, you can only claim that this behaviour falls under "other changes to increase performance or security of your website" if you actually make use of the SSL certificate after obtaining it.
- prdonahue 10y agoWe don't know /a priori/ whether the user will, as 99%+ of zones on us do, reverse proxy traffic through us. The vast majority do, and thus your statement of "you have no intention of using" is wrong; we intend to use this certificate, and almost always do. The reason that a certificate is issued on zone activation is that issuance takes non-zero time. And the second a user decides to route traffic through us, we need to have a certificate in place terminating TLS otherwise the user will experience downtime due to their visitors not being able to connect via HTTPS.
- rguiliani 10y agoyou oblivious mouthpiece. The vast majority are sheeple who TRUST YOU. YOU ARE ABUSING THAT TRUST.