3 ms·
LE should charge a small fee for wildcard certs and extended validity periods (up to some reasonable limit). They'd likely cover their operating budget very qui
by leeoniya 10y ago
LE should charge a small fee for wildcard certs and extended validity periods (up to some reasonable limit). They'd likely cover their operating budget very quickly.
What's their stance on wildcard certs with SANs? Is it simply too risky / ripe for abuse?
- mjevans 10y agoAbsolutely no knowledge here, but my /guess/ has been that they don't do more because it would either require more effort or would have soured the cross-signing deal so that they'd be validated by a CA that's already in older operating systems/devices.
- yjftsjthsd-h 10y agoI suspect they will never allow longer validity certs because they want renewal to be automated.
- sandGorgon 10y agoI will a LOT if LE can issue wildcard certificates to me with a 3 year validity. And send me reminder emails when im nearing expiry.