3 ms·
If you are a big company and need say 100k wildcard certs (say one per client).. I am pretty sure I can justify spending $50 for a wildcard cert vs a fleet of s
by brianwawok 10y ago
If you are a big company and need say 100k wildcard certs (say one per client).. I am pretty sure I can justify spending $50 for a wildcard cert vs a fleet of servers and engineers and monitors to enforce let's encrypt work.
Let's encrypt is great but let's not pretend it's the right solution for all websites.
- leeoniya 10y agoLE should charge a small fee for wildcard certs and extended validity periods (up to some reasonable limit). They'd likely cover their operating budget very quickly. What's their stance on wildcard certs with SANs? Is it simply too risky / ripe for abuse?
- mjevans 10y agoAbsolutely no knowledge here, but my /guess/ has been that they don't do more because it would either require more effort or would have soured the cross-signing deal so that they'd be validated by a CA that's already in older operating systems/devices.
- yjftsjthsd-h 10y agoI suspect they will never allow longer validity certs because they want renewal to be automated.
- sandGorgon 10y agoI will a LOT if LE can issue wildcard certificates to me with a 3 year validity. And send me reminder emails when im nearing expiry.