4 ms·
Shame you can't add CAs for a particular set of subdomains, that it's all or nothing.
by ryebit 7y ago
Shame you can't add CAs for a particular set of subdomains, that it's all or nothing.
- nwallin 7y agoYeah it really doesn't make any sense that it's not that way. I'd very much like to add the fcpca cert for .gov addresses and dod cert for .mil addresses, as I sometimes use these TLDs for work, but it doesn't make any sense to enable them globally. In fact I would like to ban all other CAs from those TLDs as they would be obviously fraudulent. I wouldn't have an issue adding cnnic for .cn either. While I'm at it, why can't... Nevermind. The certificate authority system is so damned broken I could sit here for hours. Arrrg.