3 ms·
It makes sense that their "quick" solution is to give each customer their own cert/key, but I'm surprised that they didn't go with a reverse proxy approach from
by paulirwin 9y ago
It makes sense that their "quick" solution is to give each customer their own cert/key, but I'm surprised that they didn't go with a reverse proxy approach from the beginning, where the wildcard key would be kept securely at their reverse proxy layer that no customers would have access to. Having to maintain TLS certs in IIS on each of these VMs seems like it would cause them more work than it's worth. Having experience with the platform, do you have any insight into why they would do TLS at the VM rather than via a reverse proxy?
- mgliwka 9y agoAs far as I remember, there was already a Powershell script as part of their deployment mechanism in place to deploy the certificates in the first place. Just the certificate provided to this script was a wildcard one. I agree on the reverse proxy part, but am not familiar enough with the product and Microsofts history to comment on that.