3 ms·
Use multi-SAN certificates. Yes, it means revealing who is using your service, but that's for you and your customers to weigh against the costs.
by jdub 8y ago
Use multi-SAN certificates. Yes, it means revealing who is using your service, but that's for you and your customers to weigh against the costs.
- ngrilly 8y agoThis is what I do, but that's a lot of accidental complexity. Here is what Caddy's author wrote about this: > I still don't like the idea of SAN certificates. Too much room for error... what if you go to renew a SAN and one of the domains fail, the other 99 don't get renewed either. (Sure, we can code in logic to make a different certificate with 99 names, but that gets complicated quickly.) Also, we'd need a database as we have a many-to-many relationship rather than 1:1 which is much easier. Source: https://github.com/mholt/caddy/issues/831#issuecomment-220110365 https://github.com/mholt/caddy/issues/831#issuecomment-22011...