3 ms·
Why? If you are in a corporation and don't want to show your hosts in the CT logs, don't use CAs then. In a company I don't see a problem with rolling out certi
by gsich 9y ago
Why? If you are in a corporation and don't want to show your hosts in the CT logs, don't use CAs then. In a company I don't see a problem with rolling out certificates with an own CA.
- throwaway613834 9y agoBecause you want your employees to be able to easily access a domain externally without unnecessarily advertising its existence to the entire planet?
- gsich 9y agoOh I forgot "internal hosts" in the comment. If you want external access you can still use your own CA. I think one can assume that an employee (with an employee device) has the CA installed. If this is a public host or you can't control the employee devices, then use a public cert, or live with the error message. This is not an unsolvable problem.
- throwaway613834 9y ago> If this is a public host or you can't control the employee devices, then use a public cert, or live with the error message. > This is not an unsolvable problem. You literally just did not solve it.
- gsich 9y agoWhy not? If it's a public host, use a public CA. No need to hide it there. If it's an internal host, use your own CA. What is the problem?